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Introduction: 

The  Medical  Vanguard  Diabetes  Management  Project  was  designed  to  deploy  an  Internet  based 
diabetes  management  system,  MyCareTeam,  into  a  number  of  existing  diverse  clinical  environ¬ 
ments  and  evaluate  how  such  a  stand-alone  clinical  information  system  can  be  integrated  into 
existing  diabetes  management  programs.  The  diverse  environments  include  the  High-Risk  Preg¬ 
nancy  Clinic  at  the  National  Naval  Medical  Center  (NNMC)  and  Native  American  Communities 
throughout  the  United  States.  The  GAO  Report  Executive  Guide:  Measuring  Performance  and 
Demonstrating  Results  of  Information  Technology  Investments  (GAO/AIMD-98-89)  will  be  used 
as  the  basis  for  the  evaluation  of  the  technology  implementations.  One  Native  site  has  completed 
their  participation  in  the  program,  one  is  on  hold,  2  are  actively  recruiting  and  the  last  is  main¬ 
taining  previously  enrolled  patients  but  is  not  actively  recruiting  more  patients.  The  clinic  at 
NNMC  is  still  actively  enrolling  patients  and  monitoring  their  patients  through  delivery.  The 
1RB  process  has  been  completed  at  all  sites  and  approval  received.  This  project  has  two  primary 
specific  aims:  clinical  deployment  and  deployment  evaluation. 

Body: 

I.  Statement  ofWorlc 

The  approved  Statement  of  Work  for  this  project  has  two  primary  aims  -  clinical  deployment  and 
deployment  evaluation.  During  this  third  year,  much  time  has  been  spent  on  clinical  deployment 
of  MyCareTeam  at  multiple  sites  and  recruitment  and  enrollment  of  participants.  The  adminis¬ 
trative  processes  of  setting  up  subcontracts,  working  through  the  Human  Subjects  Review  Proc¬ 
esses  for  each  institution,  and  coordinating  with  the  multiple  sites  have  been  challenging  but 
were  completed.  This  report  will  present  the  challenges  and  successes  of  deploying  this  technol¬ 
ogy  into  diverse  clinical  environments  and  then  identify  the  operations  that  will  continue  this 
year  and  the  evaluation  procedures  to  be  undertaken. 

II.  Clinical  Deployment : 

As  we  deploy  MyCareTeam  in  multiple  Department  of  Defense  (DOD)  and  Native  American 
healthcare  environments,  we  approach  this  technology  insertion  from  a  global  perspective  that 
includes  concerns  of  the  enterprise  (DOD  or  Native  American  facility),  existing  diabetes  man¬ 
agement  programs,  healthcare  units,  clinical  staff,  and  patients.  The  goal  of  the  deployment  of 
MyCareTeam  is  to  improve  the  effectiveness  of  various  existing  diabetes  management  programs 
for  the  medical  beneficiaries  in  the  DOD  as  well  as  Native  American  Communities  as  measured 
by  improved  health  outcomes  and  clinical  care  delivery. 

[he  clinical  deployment  portion  of  this  project  focuses  on  determining  the  most  efficient  and  ef¬ 
fective  way  to  identify  and  organize  the  roles  and  responsibilities  of  individuals  within  the 
healthcare  enterprise  and  the  insertion  of  MyCareTeam  within  the  healthcare  delivery  system.  A 
comprehensive  systems  approach  to  the  integration  of  MyCareTeam  into  the  different  clinical 
environments  has  been  undertaken. 

All  clinical  deployments  go  through  many  stages  before  MyCareTeam  can  be  used  effectively. 
Program  setup  and  recruitment  are  two  critical  components  of  deploying  MyCareTeam  into  an 
existing  clinical  environment.  The  stages  of  (A)  program  setup  and  (B)  recruitment  and  opera¬ 
tions  that  are  critical  to  a  successful  deployment  of  MyCareTeam  are  described  here. 
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(A)  Program  Setup 

1.  secure  subcontract  for  each  group 

At  the  end  of  the  third  year  of  funding,  subcontracts  have  been  created  and  put  in  place  for  all 
sites.  The  process  for  creating  new  subcontracts  has  not  changed  since  year  1  and  approval 
was  requested  from  a  member  of  the  National  Congress  of  American  Indians  President’s 
Taskforce  on  Healthcare  Technology  to  ensure  that  the  monies  allocated  and  distributed  to 
the  Native  Communities  are  done  so  fairly.  There  are  subcontracts  in  place  with  the  Mandan, 
Ilidatsa  &  Arikara  (MHA)  Nation,  Poarch  Band  of  Creek  Indians  (PBCI),  and  the  Native 
Hawaiian  Health  organization  -  Papa  Ola  Lokahi,  the  Nez  Perce,  and  with  the  South  Eastern 
Alaska  Regional  Health  Consortium  (SEARHC)  on  behalf  of  the  Tlingit  &  Ilaida  Tribes  of 
Alaska.  The  Wampanoag,  Rosebud  Sioux,  and  Mescalero  tribes  have  not  progressed  despite 
our  efforts  to  include  them. 

The  Native  Communities  submit  quarterly  reports  to  us  which  outline  their  progress  and  in¬ 
clude  an  invoice  for  project  related  expenses.  Upon  receipt  of  year  three  funding,  the  sub¬ 
contracts  with  PBCI,  Papa  Ola  Lokahi,  and  Nez  Perce  and  the  Cooperative  Research  and  De¬ 
velopment  Agreement  (CRADA)  with  NNMC  are  being  modified  to  reflect  a  three-year 
agreement.  The  subcontract  with  SEAHRC  has  been  terminated  and  the  one  with  MHA  Na¬ 
tion  put  on  hold. 

2.  create  a  local  project  team  including  clinical  and  project  management  personnel 

Local  project  teams  have  formed  for  all  engaged  communities.  These  teams  include  clinical, 
administrative,  and  project  management  personnel.  Some  sites  have  identified  a  physician  as 
a  member  of  the  team,  but  most  often  a  nurse  or  diabetes  educator  has  primary  responsibility 
for  interacting  with  the  patients  using  MyCareTeam.  Within  each  community,  an  advocate 
within  the  health  clinic,  an  administrator  or  a  provider  with  diabetes  knowledge  and  experi¬ 
ence,  needs  to  be  identified.  This  person  drives  the  program  from  within  the  clinic.  Their  job 
is  to  coordinate  the  clinical  personnel  that  will  work  on  the  project,  identify  patients  for  re¬ 
cruitment,  deal  with  contractual  and  human  subjects’  issues,  and  direct  the  adjustments  that 
need  to  be  made  to  the  MyCareTeam  application.  A  team  of  individuals  will  be  involved 
from  the  start  —  but  having  an  advocate  makes  coordination  between  the  clinical  and  techni¬ 
cal  teams  run  smoother. 

The  program  manager  at  the  MHA  Nation  was  laid  off  as  we  work  with  MHA  Nation  to  re¬ 
evaluate  their  progress  it  he  program  and  work  together  to  identify  how  to  get  them  back  on 
track.  Recruitment  and  enrollment  was  very  slow  and  therefore  we  all  thought  it  best  to  halt 
execution  of  the  program  until  we  could  determine  how  to  improve  the  numbers.  The  project 
team  within  the  Native  Hawaiian  Health  System  (NHHS)  has  changed  often  over  this  past 
year.  It  has  finally  settled  down  and  Principal  Investigators  from  each  of  the  two  health  clin¬ 
ics  involved  have  been  identified,  and  an  administrative  person  from  the  NHHS  is  coordinat¬ 
ing  the  two  clinics  and  clinical  consultants  to  work  with  each  site.  SEAHRC  has  decided  to 
halt  execution  of  the  project  in  Alaska  because  they  were  not  able  to  recruit  ore  enroll  enough 
patients.  PBCI  is  continuing  to  monitor  the  patients  previously  enrolled  but  will  not  actively 
recruit  or  enroll  others.  Nez  Perce  continues  to  monitor  the  patients  they  have  enrolled  and 
to  identify  ways  to  recruit  more  patients  like  by  lowering  their  A1C  limit  for  inclusion. 
NNMC  has  a  project  team  consisting  of  physicians,  residents,  and  nurses.  The  nurses  deal 
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directly  with  the  high  risk  patient  population  to  recruit  and  manage  their  care,  but  the  resi¬ 
dents  are  responsible  for  communicating  with  the  patients  via  MyCareTeam. 

3.  define  the  existing  health  services  at  each  site 

NNMC  is  a  full  service  medical  institution  providing  primary  and  specialty  care  to  all  mem¬ 
bers  of  the  armed  services  and  their  families.  NNMC  has  the  facilities  to  perform  lab  tests, 
surgery,  rehabilitation,  and  other  services  associated  with  a  full  service  in-  and  out-patient 
medical  institution.  The  Native  communities  engaged  in  the  project  tend  to  be  more  single 
clinics  focusing  on  primary  care  with  some  specialty  services  provided.  Most  do  not  have 
surgery  departments,  rehabilitation,  or  therapy  (PT,  OT,  or  radiation).  They  do  provide 
pharmacy  services,  some  provide  laboratory  services,  and  most  have  a  nurse  practitioner  or 
family  medicine  doctor  that  visits  the  clinic  regularly  but  is  not  on  full  time  staff  at  the  clinic. 
Some  patients  in  the  Native  Communities  need  to  travel  many  hours  to  the  nearest  hospital  or 
specialty  clinic  (like  dialysis)  and  thus  access  to  care  for  these  populations  is  limited  and  dif¬ 
ficult. 

4.  define  the  existing  diabetes  services  at  each  site 

NNMC  has  two  clinics  that  focus  on  the  treatment  of  pregnant  women  with  diabetes.  They 
have  a  gestational  diabetes  mellitus  (GDM)  clinic  that  focuses  on  women  who  are  pregnant 
and  develop  diabetes  during  their  pregnancy  but  can  control  their  blood  sugar  levels  through 
diet  and  exercise.  Most  of  these  women  do  not  take  medication  for  their  GDM.  The  other 
clinic  is  the  Complex  Obstetrics  (COB)  clinic  that  focuses  on  pregnant  women  with  pre¬ 
existing  diabetes  or  pregnant  women  who  developed  GDM  but  need  insulin  or  oral  medica¬ 
tions  to  control  their  diabetes.  Patients  from  both  of  these  clinics  will  be  enrolled  in  the  study 
as  long  as  they  use  a  glucose  meter  to  track  their  blood  sugar  readings. 

Most  ot  the  Native  Communities  have  implemented  diabetes  clinics  within  their  primary 
medicine  clinics.  Some  of  the  communities  have  endocrinologists  as  consultants  that  visit 
their  patients  periodically  or  to  which  they  refer  their  patients,  all  have  glucose  meters  and 
supplies  available  to  their  patients  at  no  cost,  and  all  of  the  clinics  provide  educational  classes 
to  their  patients  on  diabetes.  One  of  the  clinics  provides  a  monthly  foot  clinic  where  patients 
can  get  appointments  to  have  their  feet  examined  and  cared  for.  (Foot  ulcers  leading  to  ampu¬ 
tation  is  a  very  serious  and  common  complication  of  diabetes).  One  of  the  sites  we  are  cur¬ 
rently  working  with  was  using  a  standalone  software  application  to  read  their  patients’  glu¬ 
cose  meters  when  the  patients  came  in  for  their  regularly  scheduled  visits.  All  are  excited 
about  using  our  technology. 

Table  1 .0  below  shows  the  statistics  for  each  clinic  enrolled  in  the  project.  It  identifies  base¬ 
line  information  regarding  the  clinic  and  existing  diabetes  programs. 
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Number  o 
members 

f 

Number  of 
diabetics 

Number  of 
clinics 

Glucose  meter 

National  Naval  Medical 
Center 

>-30  at  a  time 

2-GDM 
and  COB 

AccuChek  Advantage 

MHA 

10800 

680 

5 

AccuChek  Advantage 

PBCI 

2260 

300 

1 

Precision  Xtra 

Tlingit  &  Haida 

6000 

160-180 

1 

AccuChek  Advantage 

Nez  Perce 

5000 

406 

2 

OneTouch  Ultra 

Hawaiian  Natives 

Na  Pu’  uwai 
Ke  Ola  Mamo 

65 

1485 

18 

82 

4 

1 

OneTouch  Ultra 
OneTouch  Ultra 

able  1.0  Site  Statistics 


5.  define  the  technology  resources  available 

The  implementation  of  MyCareTeam  requires  some  home  monitoring  technology.  Patients 
connect  their  glucose  meter  to  a  vital  signs  modem  device  which  connects  directly  to  a  phone 
line.  The  modem  reads  the  data  from  the  glucose  meter  and  transmits  the  readings  to  the 
MyCareTeam  database.  Initial  concerns  about  the  availability  of  telephone  lines,  computers, 
and  Internet  access  within  some  of  the  more  remote  Native  communities  has  not  shown  to  be 
a  problem. 

Access  to  computers  and  knowledge  of  the  Internet  is  more  difficult.  At  most  sites,  exclud¬ 
ing  NNMC,  a  small  number  of  their  mostly  adult  patients  with  type  2  diabetes  have  access  to 
a  computer  and  an  even  smaller  number  have  Internet  knowledge.  Therefore,  most  of  the 
sites  placed  public  access  computers  with  Internet  access  in  key  locations  making  them  ac¬ 
cessible  to  patients. 

High  speed  access  to  the  Internet  from  the  public  use  machines  is  available  for  most  sites. 
Most  patients  with  a  computer  in  their  home  or  a  family  member’s  home  use  dial-up  access 
to  the  Internet.  A  toll-free  number  is  in  place  at  the  ISIS  Center,  Georgetown  University  to 
receive  the  glucose  readings  from  the  patients  modem  devices.  The  modem  devices  are  pre¬ 
programmed  to  send  data  to  this  number  before  they  are  distributed  to  patients. 

6.  define  the  clinical  protocol  to  be  carried  out 

Each  site  determined  for  itself  the  best  way  to  integrate  MyCareTeam  into  their  existing  dia¬ 
betes  management  program.  The  protocols  for  each  of  the  Native  communities  and  the 
NNMC  are  summarized  here.  Each  site  will  survey  their  participants  within  2-4  weeks  of  en¬ 
rollment  and  then  again  8-10  weeks  later.  A  copy  of  the  survey  was  included  in  the  2005 
Annual  Report. 

Mandan.  Hidatsa  and  Arikara  Nation  (MHA  Nation):  Patients  were  recruited  from  the  Par- 
shall  and  White  Shield  Health  Facilities  on  the  Fort  Berthold  Reservation.  The  study  nurses 
at  each  clinic  selected  participants  who  were  compliant  with  their  treatment  regimen  but  who 
still  had  diabetes  that  was  not  well  controlled.  Participants  were  also  selected  on  their  ability 
and  willingness  to  access  MyCareTeam  via  the  Internet  for  a  period  of  six  months  and:  had 
A1C  greater  than  7  in  the  last  two  months  (per  February  2006  protocol  amendment);  cur- 
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rcntly  used  a  standard  glucose  meter;  were  over  18  years  of  age;  had  access  to  a  standard 
telephone  line;  possess  the  ability  to  read  and  write  English  and  a  computer  screen.  Once  en¬ 
rolled,  the  participants  were  followed  by  the  study  nurses.  Participants  were  asked  to  transfer 
their  glucose  meter  data  weekly  to  the  MyCareTeam  secured  database.  Once  the  data  was 
available  on  MyCareTeam,  patients  and  providers  reviewed  the  data  and  communicated  via 
the  site.  Changes  in  medication  regimen  and  suggestions  for  diet  and  exercise  adjustments 
were  made  through  MyCareT earn.  MyCareT earn  was  to  become  part  of  routine  care  by  the 
health  facility  staff  in  managing  the  recruited  diabetic  patients  during  this  evaluation  project. 

MHA  Nation  hired  a  study  coordinator  and  an  assistant  to  work  on  the  project.  These  indi¬ 
viduals  were  tasked  with  the  following:  budget  and  vendor  management;  provide  quarterly 
reports  to  the  ISIS  Center;  website  and  modem  orientation  for  all  research  staff  and  partici¬ 
pants  in  the  project;  travel,  as  needed,  to  participants’  homes  for  additional  instruction  and 
technical  support;  documentation  of  all  recruitment  efforts  and  technical  support  issues  for 
later  evaluation;  conduct  surveys  at  appropriate  intervals;  and  maintain  all  regulator)'  docu¬ 
ments  as  outlined  in  the  study  protocol. 

Poarch  Band  of  Creek  Indians  (PBClj:  The  PBCI  clinical  protocol  is  similar  to  MHA  Na¬ 
tion’s  described  above.  Patients  are  recruited  by  the  study  nurse  come  from  a  population  of 
diabetic  patients  seen  at  the  PBCI  Health  Clinic,  the  only  health  facility  on  the  reservation. 

All  providers  are  employees  of  the  health  clinic.  The  nurse  reviews  the  data  via  My¬ 
CareTeam  and  communicates  information  back  to  the  patient  after  consulting  with  either  the 
staff  physician  or  nurse  practitioner  in  the  health  clinic.  Both  of  these  providers  have  direct 
access  to  patient  data  on  MyCareTeam. 

Nez  Perce:  One  full  time  study  coordinator  was  hired  by  the  Nimiipuu  Health  Clinic  to  con¬ 
duct  this  study.  Another  part  time  coordinator  worked  for  several  months  assisting  the  study 
coordinator  at  the  beginning  of  the  recruitment  and  enrollment  period.  Once  trained  on  the 
use  ol  the  technology,  the  study  coordinator  trained  the  provider/nurse  teams  at  Nimiipuu 
Health  who  work  with  diabetic  patients,  the  pharmacist,  the  nutritionist,  and  the  diabetes 
educator  who  all  monitor  and  manage  the  participants’  diabetes.  The  inclusion  criteria  identi¬ 
fied  above  for  the  MHA  Nation  study  is  used  at  the  Nimiipuu  Health  Clinic. 

Tlingit  &  Haida:  For  this  segment  of  the  study ,_paticnts  W'ere  recruited  from  the  South  East¬ 
ern  Alaska  Regional  health  Consortium  (SEARHC)  Medical  Center  in  Juneau,  Alaska.  The 
study  nurse  selected  patients  with  poorly  controlled  diabetes  but  who  are  able  and  willing  to 
access  MyCareTeam  via  the  Internet  for  a  period  of  six  months.  The  inclusion  criteria  w'ere 
the  same  as  the  MHA  Nation.  During  the  course  of  the  study,  patients  were  followed  by  the 
research  nurse  at  SEARIIC  using  the  MyCareTeam  system  . 

Papa  Ola  Lokahi:  Papa  Ola  Lokahi  coordinates  the  project  being  executed  at  two  Native 
Hawaiian  Health  clinics  in  Hawaii,  Na  Pu'uwai  on  the  island  of  Moloka'i  and  Ke  Ola  Mamo 
Native  Hawaiian  Health  Care  Systems  (NHHCS),  on  O  ahu.  Both  of  these  clinics  have  a 
study  nurse  who  recruits  participants,  trains  them  in  the  use  of  the  MyCareTeam  system,  and 
also  monitors  the  blood  sugar  levels  and  receives  and  senda  messages  to  participants. 
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To  ensure  participant  confidentiality,  per  a  requirement  of  the  Native  Hawaiian  Health  Care 
Systems  IRB,  a  specially  designed  registration  process  is  used  to  identify  participants  within 
the  MyCareTeam  system.  To  create  a  de-identified  username  and  password,  the  subject  is  as¬ 
signed  a  study  number  (i.e.  082)  and  an  alias  as  the  “first  name”  (i.e.  Minnie).  A  subject  “log 
in”  is  then  automatically  created  by  combining  the  study  number  and  the  first  three  letters 
from  the  first  name  field  (i.e.  082-Minn).  Only  the  local  Research  Team  has  access  to  the 
“master  list”  of  patients  to  assure  that  care  is  provided  to  the  correct  client.  The  same  inclu¬ 
sion  criteria  as  outlined  for  MHA  Nation  are  used  at  these  sites. 

All  Native  American  Sites:  All  participants  at  the  Native  American  sites  complete  two  pa¬ 
tient  satisfaction  telephone  surveys:  the  first  2-4  weeks  after  enrollment  in  the  study  and  the 
second  2-4  months  later.  The  surveys  provide  incite  into  each  participants’  satisfaction  with 
the  MyCareTeam  technology,  communicating  with  their  care  providers  using  the  technology, 
and  the  usefulness  of  the  online  educational  materials.  Survey  results  are  analyzed  and  if  and 
where  deficiencies  are  found  in  the  MyCareTeam  system,  modifications  are  implemented. 
Survey  results  also  guide  the  modification  of  the  technology  to  address  both  cultural  and 
clinical  diversity.  Throughout  the  study,  we  will  continue  to  reassess  the  system  and  make 
changes  as  needed. 

National  Naval  Medical  Center  fNNMC):  Patients  are  recruited  from  the  Complicated  Ob¬ 
stetrics  (COB)  and  the  Gestational  Diabetes  Mellitus  (GDM)  Clinics  at  NNMC  in  Bethesda 
Maryland.  Participants  come  from  a  population  of  pregnant  women  who  have  either  preex¬ 
isting  diabetes  or  who  have  been  diagnosed  with  gestational  diabetes.  Patients  are  eligible 
for  the  study  if  they  meet  the  following  criteria:  pregnancy  is  complicated  by  either  type  1  or 
2  diabetes  or  patient  is  diagnosed  with  gestational  diabetes;  the  participant  is  less  than  32 
weeks  pregnant;  they  regularly  test  blood  glucose  levels  using  a  standard  glucose  meter;  they 
can  read  and  write  English;  and  they  are  over  1 8  years  of  age. 

Patients  transfer  their  blood  glucose  readings  twice  a  week  to  the  MyCareTeam  secured  da¬ 
tabase  using  the  AccuLink  Modem  or  by  connecting  their  glucose  meter  to  a  personal  com¬ 
puter.  The  GDM  and  COB  residents  and  nurses  examine  the  information  online.  The  resi¬ 
dents  can  change  orders  for  the  patient’s  regimen  and  message  the  change  back  to  the  patient 
via  MyCareTeam.  Patients  are  instructed  to  review  their  own  data  on  MyCareTeam  and  to 
look  for  messages  from  and  send  messages  to  their  providers  using  the  system.  Patients  are 
given  a  survey  two-four  weeks  after  enrollment  and  again  at  approximately  35-38  weeks  of 
pregnancy,  i  he  survey  helps  us  to  understand  their  reaction  to  the  technology  implemented 
through  MyCareTeam,  how  they  felt  about  communicating  with  their  eare  provider  over  the 
Internet,  and  their  feelings  towards  the  educational  materials. 

7.  determine  where  the  database  and  web  servers  will  be  hosted  and  managed 

Due  to  monetary  constraints  and  technical  expertise,  all  sites  have  opted  to  have  the  ISIS 
Center  at  Georgetown  University  host  the  web  and  database  servers.  Toll-free  telephone 
numbers  have  been  setup  to  facilitate  the  transfer  of  data  directly  from  the  glucose  meters  via 
the  modem  devices  to  the  MyCareTeam  database.  The  computer  facility  at  the  ISIS  Center  is 
a  locked  room  in  a  secured  facility.  It  is  protected  by  electronic  firewalls  and  VPNs  as  need 
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to  ensure  the  safety  and  integrity  of  the  clinical  data.  128-bit  secure  socket  layer  encryption 
insures  that  no  unencrypted  confidential  information  is  sent  over  the  Internet. 

8.  secure  human  subjects  approval  from  all  necessary  institutions 

Human  subjects’  protections  are  a  large  piece  of  getting  this  program  underway.  Before  re¬ 
cruitment  of  study  participants  can  begin,  authorization  must  be  received  from  three  separate 
human  subjects  approval  agencies  or  institutional  review  boards  (IRB).  The  first  agency  is 
Georgetown  University.  We  first  received  expedited  review  approval  from  the  Georgetown 
University  IRB  on  August  21,  2003.  We  have  since  received  three  additional  continuing  ap¬ 
provals  with  the  next  due  on  June  1 3,  2007. 

The  second  human  subjects’  approval  comes  from  the  regional  IRB  for  each  of  the  American 
Indian,  Alaskan  Native  and  Native  Hawaiian  communities  and  NNMC  and  is  referred  to  as 
the  primary  IRB  approval.  Each  study  site  submitted  a  protocol  and  consent  form  adapted  to 
their  individual  needs.  The  Native  American  and  Alaskan  Native  communities  received  ap¬ 
proval  from  the  local  Indian  Health  Service  (IIIS)  IRB  committees.  The  PBCI  received  au¬ 
thorization  to  carry  to  the  study  from  IHS  Headquarters  in  Bethesda,  Maryland  since  the  re¬ 
gional  IHS  IRB  is  not  operational  at  this  time.  The  local  area  IHS  IRB  committees  are  lo¬ 
cated  in  Anchorage,  Alaska;  Aberdeen,  North  Dakota;  and  Portland,  Oregon.  Primary  ap¬ 
proval  for  the  Native  Hawaiian  study  will  come  from  Papa  Ola  Lokahi,  a  Native  Hawaiian 
Healthcare  System  providing  human  subjects  approval  on  projects  related  to  Native  Hawai¬ 
ian  Healthcare.  NNMC  has  its  own  IRB  committee. 

The  third  and  final  authorization  came  from  the  Human  Subjects  Research  Review  Board 
(I-ISRRB)/Office  of  Regulatory  Compliance  and  Quality  (RCQ),  United  States  Army  Medi¬ 
cal  Research  and  Materiel  Command.  This  is  referred  to  as  secondary  approval. 

The  chart  below  shows  the  dates  that  primary  and  secondary  IRB  approval  was  received  for 
each  site. 


Institution 

Primary 

Approva 

1 

HSRRB  Ap¬ 
proval 

Continuing 
Review  Ap¬ 
proval  Due 

NNMC 

1-25-05 

1-4-05 

4-1-07 

MHA 

5-5-05 

6-15-05 

11-20-06 

PBCI 

9-1-04 

3-17-05 

8-31-07 

Tlingit  &  Haida 

8-31-05 

2-27-06 

8-31-06 

Nez  Perce 

6-6-05 

2-14-06 

6-5-07 

Hawaiian  Natives 
Na  Puuwai 
Ke  Ola  Mamo 

12-9-05 

3-15-06 

12-8-06 

Table  2.0  Human  Subjects’  Approval 


9.  review  the  MyCareTcam  site  for  modifications,  setting  defaults,  creating  accounts 

During  the  first  year  of  the  project,  the  IHS  diabetes  curriculum  was  integrated  into  the  web 
site  to  provide  diabetes  education  materials  to  the  Native  communities.  All  of  the  Native 
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American  Communities,  including  the  Hawaiian  Natives,  agreed  to  use  this  educational  in¬ 
formation  for  their  patients.  During  this  past  year,  the  Hawaiian  clinics  identified  areas  of 
the  application  that  should  be  modified  to  make  the  software  more  culturally  appropriate. 

Hie  look  and  feel  of  the  lobby  was  updated  to  include  a  more  Hawaiian  looking  receptionist, 
and  to  use  Hawaiian  words.  The  outside  of  the  building  was  also  updated  to  include  Hawai¬ 
ian  vegetation.  The  personnel  at  the  Hawaiian  clinics  also  requested  that  we  allow  them  to 
track  cholesterol  medications  for  their  patients  like  we  do  for  hypertension  medications.  This 
is  currently  being  implemented. 

Some  other  changes  that  have  occurred  were  at  the  request  of  the  NNMC.  We  created  a 
mechanism  that  their  patients  could  directly  connect  their  glucose  meters  to  a  computer  and 
bypass  the  use  of  the  modem  device.  More  and  more  of  the  NNMC  patients  did  not  have 
land  line  telephones  at  home.  NNMC  personnel  also  requested  that  a  prescribing  page  and 
tracking  page  for  insulin  pump  users  be  incorporated.  This  is  underdevelopment. 

Configuration  of  the  sites  for  the  Nez  Perce,  Tlingit  &  Haida  Tribes,  and  the  Hawaiian  Na¬ 
tive  communities  was  completed  this  past  year.  All  clinicians  at  each  site  were  trained  to  use 
MyCareTeam  during  this  year. 

10.  procure  technolog}'  including  blood  glucose  meters,  modem  technologies,  cables,  com¬ 
puters,  install  communications  lines,  setup  telephone  numbers 

The  technology  necessary  to  transfer  blood  glucose  readings  from  the  glucose  meters  to  the 
MyCareTeam  database  was  procured  for  all  sites.  NNMC  continues  to  use  the  AccuChek 
Advantage  glucose  meters  and  thus  the  AccuLink  modem  to  transfer  the  data  from  the  meter 
to  the  database.  SEAHRC  also  used  the  AccuChek  meters  and  AccuLink  modems.  During 
this  past  year,  MHA  Nation  switched  from  using  the  AccuChek  Advantage  meter  to  the  Pre¬ 
cision  Xtra  meter.  This  resulted  in  a  change  in  the  modem  device  used  and  thus  precipitated 
the  temporary  hold  being  placed  on  the  operations  of  the  project  at  MHA  Nation.  MHA  Na¬ 
tion  sent  their  AccuLink  modems  to  us  at  Georgetown  and  their  cables  to  SEAHRC  in 
Alaska.  Unfortunately  the  box  containing  the  cables  got  lost  and  was  never  recovered.  The 
modems  arrived  safely  and  can  be  used  by  other  sites  if  any  are  added  to  the  program  that  use 
the  AccuChek  glucose  meters. 

PBC I  uses  the  Precision  Xtra  meter  and  thus  uses  the  AeroTel  TeleCliniQ  to  transfer  the 
blood  glucose  readings  from  the  meter  to  the  MyCareTeam  database.  AeroTel  increased  the 
price  ol  their  modem  this  past  year  to  $170  each  from  $150,  although  this  is  still  a  discount 
from  their  retail  price  of  $250.  The  PBCI  buys  the  cables  connecting  the  glucose  meter  to  the 
modem  directly  from  the  glucose  meter  manufacturer.  The  manufacturer  has  provided  some 
cables  free  to  the  site. 

The  Nez  Perce  site  and  the  Hawaiian  Health  clinics  both  use  the  Lifescan  OneTouch  glucose 
meters  and  the  Aerotel  releCliniQ  modems.  The  LifeScan  representative  has  generously 
provided  meter  cables  free  of  charge  to  the  sites. 

1  wo  toll-free  numbers  continue  to  operate  at  the  ISIS  Center  to  accept  the  data  transmitted 
from  the  TeleCliniQ  and  AccuLink  modem  devices. 
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11.  train  clinical  personnel 

Personnel  from  SEAHRC,  Nez  Perce  and  the  two  Hawaiian  Health  Clinics  were  trained  at 
the  ISIS  Center  this  past  year.  No  retraining  was  required  for  the  MHA  Nation,  PBCI,  or 
NNMC  personnel.  We  still  provide  a  certified  diabetes  educator  to  the  NNMC  site  to  aid  in 
training  the  newr  residents  rotating  through  the  clinic  and  handling  administrative  issues  such 
as  enrolling  patients,  training  the  users  on  the  system,  entering  lab  results  and  entering  medi¬ 
cations. 

( B)  Recruilmenj  ami  (liberations 

I.  Define  inclusion  and  exclusion  criteria  for  patient  participation 


Native  American  Sites: 


Inclusion 

Exclusion 

Have  type  1  or  type  2  diabetes  mellitus  that 
has  been  diagnosed  for  at  least  6  months. 

Less  than  1 8  years  of  age 

Have  an  Ale  value  >  7  in  the  last  two  months 

Unable  to  read  and  write  English 

Currently  using  a  standard  glucose  meter 

Unable  to  read  a  computer  screen 

Have  access  to  a  Plain  Old  Telephone  Sys¬ 
tem  (POTS)  line 

National  Naval  Medical  Center: 


Inclusion 

Exclusion 

Pregnancy  is  complicated  by  either  type  1  or 

2  diabetes  or  patient  is  diagnosed  with  gesta¬ 
tional  diabetes 

Less  than  1 8  years  of  age 

Patient  regularly  tests  blood  glucose  levels 
using  a  standard  glucose  meter 

Patient  has  a  significant  medical  co¬ 
morbidity  that  would  inhibit  their  ability  to 
use  MCT 

Have  access  to  a  Plain  Old  Telephone  Sys¬ 
tem  (POTS)  line 

Patient  has  a  history  of  serious  psychiatric 
disorder 

Patient  can  read  and  write  Englisl 

1 

Patient’s  physician  has  objections  to  her  par¬ 
ticipating  in  the  study 

1  Have  access  to  a  computer  and  the  Internet 

2.  identify  recruitment  procedures 

Each  site  has  determined  the  best  way  to  recruit  their  patients.  Whether  to  use  public  an¬ 
nouncements,  brochures,  or  flyers  for  recruitment  is  decided  by  each  site  individually. 


Site 

Recruitment  Procedure 

National  Naval  Medical  Center 
Bethesda,  Maryland 

Study  nurse  meets  with  obstetrical  clinic  staff 
weekly  to  identify  those  patients  who  meet 
the  inclusion  criteria.  The  study  nurse  then 
schedules  a  time  to  meet  with  these  patients, 
reviews  all  study  procedures  and  invites  the 
patient  to  participate.  If  the  patient  consents 
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to  enroll  in  the  study,  enrollment  procedures 
are  followed  according  to  NNMC  IRB  proto¬ 
col  and  patient  training  is  completed.  Pa¬ 
tients  are  then  given  the  modem  to  take  home 
along  with  instructions  on  how  to  use  it  and 
how  frequently  to  send  their  data  into  the 
system. 


Poarch  Band  of  Creek  Indians 
Atmore,  Alabama 

MHA  Nation 

New  Town,  North  Dakota 

Nez  Perce  Tribe 
Lapwai,  Idaho 

Tlingit  &  Haida  Tribes 
Juneau,  Alaska 


Individuals  are  recruited  from  a  population  of 
patients  receiving  diabetes  care  from  the 
tribal  health  clinics.  Project  investigators 
select  participants  who  are  compliant  with 
their  treatment  regimen  but  whose  diabetes  is 
not  well  controlled.  During  the  period  of 
study,  a  diabetes  nurse  or  member  of  the  re¬ 
search  team  speaks  to  patients  who  meet  the 
inclusion  criteria.  All  project  team  members 
involved  in  the  consenting  process  have 
completed  the  NCI  Human  Subjects  Training 
Program.  After  informing  the  patient  that 
they  are  eligible  to  participate,  the  team 
member  gives  the  patient  a  brief  description 
of  the  project.  If  the  patient  indicates  an  in¬ 
terest  in  participating,  the  consent  form  is 
reviewed  with  them  and  all  questions  the  pa¬ 
tient  may  have  are  answered.  If  the  patient 
consents  to  enroll  in  the  study,  enrollment 
procedures  are  followed  according  to  local 
IHS  area  IRB  protocol  and  patient  training  is 
completed.  The  original  signed  copy  of  the 
consent  form  is  placed  in  the  patient’s  medi¬ 
cal  record  and  the  patient  receives  a  copy  for 
their  records.  Patients  are  then  given  the 
modem  to  take  home  along  with  instructions 
on  how  to  use  it  and  how  frequently  to  send 
their  data  into  the  system. 


3.  identify  incentives,  if  any,  that  will  be  used 

The  only  site  truly  using  incentives  to  encourage  participation  is  the  Nez  Perce.  The  study 
coordinator  at  Nimiipuu  Health  created  a  step-program  to  administer  incentives  for  study  par¬ 
ticipants.  People  who  attended  an  informational  meeting  about  the  study  were  given  “Diabe¬ 
tes  for  Life”  magnets.  Once  an  individual  agrees  to  participate  and  is  enrolled,  they  are  eligi¬ 
ble  lor  a  step  program  for  receiving  incentives.  The  first  time  one  sends  in  their  data  they  are 
sent  a  pedometer.  If  they  then  downloaded  two  times  in  the  next  two  months  and  logged  in 
to  the  site  once  each  month  they  receive  a  Nike  t-shirt  embossed  with  the  diabetes  program 
logo.  Lastly,  if  a  participant  checked  their  blood  sugars  at  least  6  times  per  week  for  4  weeks 
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they  received  a  pair  of  running  shoes  from  Nike.net.  And  finally  after  completing  the  study, 
participants  will  receive  $50.  This  information  is  being  shared  with  the  other  sites  and  they 
are  being  encouraged  to  develop  their  own  set  of  incentives. 

4.  gain  consent 

Consent  forms  have  been  created  and  primary  and  secondary  approvals  received  for  all  sites. 

5.  Summary  of  Program  Setup 

A  summary  of  the  progress  of  the  program  setup  is  provided  below  in  Table  3.0. 
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NNMC 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

None 

X  (35) 

Mescalero 

Rosebud 

Nez  Perce 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X  (29) 

Gay  Head 

X 

X 

X 

X 

Tlingit  and 
Haida 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

None 

X  (13) 

Papa 

X 

X 

X 

X 

jx 

X 

X 

X 

X 

X 

X 

X 

X 

None 

(91)  X 

PBCI 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

None 

X(25) 

MHA 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

(oi)x 
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Project  Team 

Health  Services 
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O 
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Clinical  Protocol 

Host  Servers 
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CareTeam 

Procure  Technol¬ 
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Training 

(B)  Recruitment 

Criteria 

Procedures 

Incentives 

Enrolled 

Oh 

a 

m 


B 

CQ 

Ob 

£ 

Oh 

O 

rn 

JJ 

3 

Cu 

H 


X 


-  completed  (number  enrolled) 


III.  Devlovment  evaluation 


(A)  Introduction 

I  his  section  focuses  on  evaluating  whether  the  insertion  of  MyCareTeam  into  routine  delivery  of 
healthcare  services  and  specifically  chronic  disease  management  was  effective. 

The  earlier  indications  of  the  effectiveness  of  MyCareTeam  as  a  stand-alone  specialty  disease 
management  e-health  system  are  encouraging.  However,  insertion  of  MyCareTeam  into  multiple 
diverse  clinical  environments  presents  new  technical,  clinical,  management,  and  cultural  chal¬ 
lenges. 

During  this  past  year,  Inyoung  Choi,  PhD  joined  our  team  and  worked  closely  with  Jim  Grigsby, 
PhD  to  redesign  and  develop  the  evaluation  process.  The  Chain  of  Events  analysis  outlined  in  the 
GAO  report  will  be  used  where  appropriate.  Dr.  Choi  has  developed  an  evaluation  framework 
that  addresses  three-phases  of  evaluation:  Planning,  Implementation,  and  Monitoring.  Each  of 
these  phases  is  then  evaluated  based  on  Operational,  Technical,  Security  and  Outcomes  foci. 

This  section  describes  our  evaluation  effort  of  the  implementation  of  MyCareTeam  and  proposes 
how  a  web-based  diabetes  management  application  can  be  integrated  into  diabetes  management 
programs.  Towards  this  end,  we  took  the  following  steps: 

(i)  Developed  a  performance  evaluation  model  that  aligns  with  the  objectives  of  the  project 

(ii)  Identified  how  to  implement  MyCareTeam  into  diverse  communities  and  evaluate  its  ef¬ 
fectiveness. 

Towards  this  end,  we  identified  three  phases  of  the  evaluation  process:  planning,  implementa¬ 
tion,  and  monitoring.  Each  of  these  phases  must  focus  on  different  aspects  of  operational,  techni¬ 
cal  and  security  features. 

Planning  phase 

I  he  goai  of  the  planning  phase  is  to  define  the  operational,  technical,  and  security  features  nec¬ 
essary  to  implement  MyCareTeam  that  meets  patients’  and  clinicians’  expectations  and  results  in 
patients’  satisfaction  of  their  diabetes  management.  The  operational  tasks  that  are  part  of  tire 
planning  phase  are  to  develop  an  appropriate  project  team,  to  define  and  understand  the  existing 
diabetes  management  process,  and  to  successfully  navigate  the  IRB  process.  The  technical  tasks 
are  to  identify  and  verify  that  the  technical  infrastructure  exists  at  each  site  to  carry  out  the  pro¬ 
ject  and  then  to  define  the  modifications  of  the  MyCareTeam  application  requested  by  each  site. 

Implementation  phase 

The  goal  of  the  implementation  phase  is  to  define  the  operational  and  technical  features  that  en¬ 
able  MyCareTeam  to  work  well  in  diverse  sites.  The  operational  tasks  include  training  for  pa¬ 
tients  and  providers,  developing  recruitment  criteria  that  permit  the  identification  of  a  sufficient 
participant  population,  and  recruiting  of  patients.  T  he  technical  tasks  include  integrating  the 
MyCare  1  earn  application  with  the  glucose  meters  and  modems  used  at  each  site  and  insuring  the 
clinicians  have  access  to  all  their  patients’  data  via  the  Internet.  This  includes  defining  and  im- 
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plementing  site  parameters  and  site  specific  changes  to  the  web  site  and  insuring  secure  access 
for  all. 

Monitoring  phase 

The  goal  of  the  monitoring  phase  is  to  monitor  the  compliance  of  operational,  technical  and  secu¬ 
rity  features  once  MyCareTeam  is  implemented  in  the  diverse  healthcare  settings.  In  addition, 
the  quantitative  evaluation  of  clinical  and  other  outcomes  data,  like  patient's  satisfaction,  will  be 
conducted  to  explore  the  how  MyCareTeam  can  be  inserted  into  clinical  care  settings  outside  of 
research  studies. 

(B1  Project  evaluation  Model 

CiAO's  IT  Performance  Measurement  Guide  (1998)  states  that  performance  evaluation  standards 
should  align  with  the  mission  and  objectives  of  the  project.  Performance  measurements  define 
how  information  technology  can  contribute  to  desired  improvement  in  outcomes. 

The  objective  of  the  Medical  Vanguard  Diabetes  Management  Program  is  to  improve  the  diabe¬ 
tes  management  process  in  diverse  clinical  settings  by  introducing  a  web-based  diabetes  man¬ 
agement  application.  To  accomplish  this  goal,  intermediate  efforts  along  with  final  outcome  are 
measured  and  evaluated. 

Performance  evaluation  will  include  measurement  of  the  planning,  implementation  and  monitor¬ 
ing  phases  in  terms  of  operational,  technical,  security  and  outcome  perspectives  as  diagramed  in 
Figure  1 .0.  Therefore,  our  evaluation  of  this  project  will  determine  how  well  the  broad  objectives 
and  intermediate  goals  we  set  for  each  phase  of  the  project,  as  outlined  above,  were  met. 


Planning  Phase  j  Implementation 

Monitoring  Phase 

l 

i 

|  *  Organization 

Operational  Evaluation 

•  Diabetes  management 

I 

i 

1 

i 

t 

*  IRB 

Technical  Evaluation 

_  *  H/W,  S/W,  Network 

^^ecurity^^^ 

Evaluation  ^  *  Policy  &  Regulation 

t 

Outcome  Evalua-  ,  *  Clinical  outcomes 

Figure  1.0  Project  roadmap  and  Evaluation  Model 
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PLANNING  PHASE 

The  evaluation  of  the  planning  phase  assesses  the  operational,  technical  and  security  features  re¬ 
lated  to  the  implementation  of  the  project.  The  categories  and  key  evaluation  measures  are  listed 
in  Table  4.0  for  the  operational,  technical  and  security  features  required  during  the  planning 
phase. 


Category 


Key  Evaluation 


Operational 

feature 


Technical 

feature 


Security 

feature 


Create  project  team 

Identify  diabetes  man¬ 
agement  process 

Attain  IRB  approval 

Define  Modification  re- 

quirements _ 

Setup  technical  infrastruc¬ 
ture  setup 

Evaluate  current  infra¬ 
structure 

Define  security  require¬ 
ments 

Define  threats  and  secu¬ 
rity  roles 

Develop  security  policies 
Table  4.0  Key  Evaluation 


•  Develop  team 

•  Assign  responsibility 

•  Identify  provider  roles 

•  Identify  clinic  visit 

•  Monitor  A 1 C  levels 

•  Define  protocol 

•  Average  time  spent _ 

•  Communication  with  local  clinics 

•  Apply  user’s  requirements _ 

•  Setup  communication  line 

•  Prepare  H/W 

»  Install  S/W _ 

•  H/W,  S/W  infrastructure  compatibility 

•  Network  configuration 

•  System  configuration _ 

•  Develop  H/W,  S/W,  network  require¬ 
ments 

•  Role  creation 

•  Create  accounts 

•  Access  control  and  authentication 

•  Documentation  of  security  policy 

Components  for  the  Planning  Phase 


Operational  evaluation  -  Project  team 

An  interdisciplinary  team  including  clinical,  administrative,  technical  and  project  management 
personnel  from  ISIS  and  the  local  clinics  were  established  and  their  roles  defined  (Figure  2.0). 
The  details  for  each  position  are  as  follows: 


Project 

Management 


-  Project  Mgr 

-  Compliance  Ofcr 


Technical 

Support 

-  Software  devel¬ 
opers 


ISIS 

Local  Clinics 

1 

r  - - - -  -  - - 

i 

Principal 

1 

1 

1 

i 

!  Principal 

Investigator 

i 

i 

i 

I 

t  Investigator 

i 

Local 

Technical 

Support 


-  Site  Coordi¬ 
nator 


-  Physician 

-  Nurses 


Figure  2.0  Project  Teams  and  Roles 


W8 1 X  WH-04-2-0002 


18 


ISIS 

ISIS  management  of  the  Medical  Vanguard  Diabetes  Management  program  relies  on  a  multitude 
of  individuals  committed  to  project  management  and  technical  development  and  support:  The 
Principal  Investigator,  The  Project  Management  Team,  and  the  Technical  Team. 

The  Principal  Investigator  supervises  the  entire  project  process 

The  Project  Management  Team  includes  a  Project  Manager  that  handles  the  day-to-day  opera¬ 
tions  oi  the  program;  a  compliance  office  that  handles  the  human  subjects'  approval  process;  an 
administrator  to  mange  financial  components,  and  an  evaluator  to  analyze  the  progress  of  the 
project.  Some  of  the  responsibilities  of  the  Project  Management  Team  include 

•  Monitoring  usage  per  site 

•  Managing  contracts  and  invoices 

•  d  raining  users 

•  Administering  user  surveys 

•  Evaluating  the  project 

The  Technical  Team  includes  software  developers,  network  administrators  and  technical  support 
personnel.  Some  of  their  responsibilities  include: 

•  Reviewing  the  MyCareTeam  software  with  the  sites  and  modifying  the  software  as 
identified 

•  Configuring  each  new  site 

•  Setting  up  the  modem  servers 

•  Maintaining  the  web  and  database  servers 

•  Providing  telephone  support 

•  Developing  new  features  as  needed 

•  Incorporating  educational  materials  and  new  News  articles  as  requested 

•  Monitoring  the  site  &  database  daily 

Local  clinics 

Local  management  of  the  Medical  Vanguard  Diabetes  Management  program  relies  on  a  multi¬ 
tude  of  individuals  committed  to  project  management,  clinical  operations,  and  support:  The  Prin¬ 
cipal  Investigator,  The  Project  Management  1  earn,  and  the  Clinical  Team,  Some  sites  also  have 
onsite  technical  support  while  others  rely  on  their  project  team  for  first  line  support  and  then  the 
ISIS  Center  for  further  support. 

The  Local  Principal  Investigator 

•  Supervises  the  implementation  process  of  MyCareTeam 

•  Handles  contract  issues 

•  Works  with  ISIS  to  navigate  the  local  human  subjects  committee 
The  Project  Management  Team 

Some  sites  have  identified  a  project  coordinator  that  has  clinical  knowledge  and  experience  re¬ 
garding  the  management  of  diabetes,  while  other  sites  have  focuses  on  someone  that  can  handle 
the  day-to-day  operations  of  the  site  and  leave  the  clinical  management  to  the  Clinical  Team. 
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The  Project  coordinator  drives  the  program  from  within  the  clinic  and  may  rely  on  a  team  to 
cover  the  other  responsibilities  including: 

•  Recruiting  and  enrolling  patients 

•  Creating  the  patient  record  within  MyCareTeam 

•  Training  patients  and  other  providers 

•  Encouraging  and  tracking  patients’  use  of  the  technology 

•  Providing  operational  support  and  lsl  line  of  technical  support 

•  Procuring  modem  devices  and  cables 

•  Preparing  invoices 

The  Clinical  Team 

The  Clinical  Team  may  contain  nurses,  nurse  practitioners,  physicians,  physicians’  assistants, 
dieticians,  certified  diabetes  educators  and  others  depending  on  the  availability  at  a  given  clinic. 
Their  responsibilities  include  interacting  with  the  patients  and  their  data  through  the  My- 
Care'l  cam  application.  The  team’s  responsibilities  include: 

•  Reviewing  blood  glucose  readings  on  the  site 

•  Entering  laboratory  results  into  the  site 

•  Entering  medication  changes 

•  Messaging  with  patients  and  other  providers 


Issues  and  recommendations 

While  evaluating  the  results  of  the  planning  phase,  we  identified  some  things  that  worked  and 
some  that  could  have  been  handled  better.  They  will  be  identified  here. 

Issue:  Developing  the  appropriate  Teams 

Each  site  needs  to  have  a  strong  project  coordinator,  clinical  personnel,  and  good  support  from 
their  tribal  or  larger  facility.  While  it  is  critical  to  identify  potential  participants,  it  is  as  critical 
that  the  providers  use  the  site  so  that  they  communicate  with  the  participants  using  the  site.  This 
will  encourage  the  participants  to  continue  using  the  system. 

Recommendation:  Find  a  strong  clinical  advocate 

Getting  a  strong  clinical  advocate  to  work  with  your  Project  coordinator  or  Project  management 
team  will  make  for  a  smoother  transition.  Nurses  and  physicians  are  very  busy,  so  if  they  see 
this  as  an  added  burden  and  not  something  they  have  bought  into,  it  will  be  difficult  to  be  suc¬ 
cessful.  I  he  sites  that  had  both  strong  project  coordination  and  strong  clinical  advocates  were 
the  most  successful  identifying,  recruiting,  enrolling  and  monitoring  patients. 

Issue:  Local  technical  support 

It  is  important  to  have  someone  on  the  project  management  team  who  is  comfortable  with  tech¬ 
nology  or  to  have  some  local  technical  support.  Questions  from  patients,  problems  with  modems 
or  phone  lines  can  interrupt  forward  progress  with  the  project. 

Recommendation:  If  the  patient  population  is  not  computer  savvy  and  the  project  management 
and  clinical  teams  are  not  either,  having  access  to  local  technical  support  would  be  helpful .  Of¬ 
ten,  many  issues  that  seem  to  take  a  while  to  figure  out  could  be  handled  more  quickly  if  there  is 
good  local  technical  support  working  with  the  ISIS  technical  support  team. 
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Operational  Evaluation  -  Identify  the  Diabetes  Management  Process 

Each  clinic  had  a  process  established  to  manage  their  diabetic  patients.  The  PBCI  health  clinic 
has  “Diabetes  Day”  each  Tuesday  where  they  schedule  approximately  250  patients  with  diabetes 
for  their  clinic  visits,  lab  tests,  foot  clinic,  nutrition  counseling  and  more.  Similarly,  MHA  Na¬ 
tion  has  a  “Diabetes  Day”  once  a  month  when  tribal  members  can  come  in  and  have  their  feet 
checked,  talk  with  a  dietitian,  or  go  over  their  glucose  readings.  Most  of  the  patients  with  diabe¬ 
tes  within  the  Nez  Perce  tribe  are  seen  at  the  main  clinic  on  the  reservation.  These  individuals 
are  treated  by  a  team  of  clinicians  to  help  manage  their  diabetes.  There  does  not  seem  to  be  any- 
set  days  for  these  patients  to  be  seen.  The  two  Hawaiian  clinics  have  similar  approaches  to  dia¬ 
betes  management.  They  both  teach  their  patients  how  to  manage  their  diabetes.  The  Na 
Pu’uwai  clinic  on  Molokai  also  offers  case  management,  education  and  outreach  programs  for 
their  diabetic  patients.  The  diabetes  program  at  SEARHC  provides  an  RN/case  manager,  a  clini¬ 
cal  dietitian,  physical  therapy,  foot  care,  and  wound  care.  At  NNMC,  diabetes  management  of 
the  pregnant  women  is  handled  by  either  the  Complicated  OB  clinic  or  the  Gestational  Diabetes 
Clinic.  Nurses,  attending  physicians,  residents,  and  a  dietitian  work  with  these  women  to  care 
for  their  pregnancy  and  their  diabetes.  The  clinical  staff  within  these  clinics  offers  educational 
classes  and  training  on  managing  diabetes  and  injecting  insulin  as  needed.  The  dietitian  works 
w'ith  each  woman  individually  to  teach  them  about  the  importance  of  diet  and  exercise  on  diabe¬ 
tes  and  pregnancy. 

Each  clinic  provides  glucose  meters  and  strip  to  all  their  patients  for  free.  The  Indian  Health 
Service  provides  the  meters  and  strips  to  each  American  Indian  health  clinic.  The  Native  Hawai¬ 
ian  Healthcare  system  provides  them  for  the  Native  Hawaiian  population  and  the  US  Navy  pro¬ 
vides  them  for  the  NNMC  patients. 

It  was  very  important  to  understand  the  existing  diabetes  management  programs  at  the  sites  be¬ 
fore  inserting  the  MyCareTeam  technology  into  the  health  clinic.  The  sites  w'ith  well  defined 
programs  had  an  easier  time  implementing  the  technology  into  their  program.  Those  sites  with 
not  as  well  defined  process  in  place  had  more  difficulty  identifying  how  the  technology  could 
work  within  their  existing  structure. 

Operational  Evaluation  -  IRB  approval 

Receiving  human  subjects’  protection  approval  was  critical  before  any  patients  could  be  enrolled 
into  this  program.  Authorization  from  three  separate  human  subjects’  approval  agencies  or  insti¬ 
tutional  review  boards  (IRB)  was  required:  Georgetown  University;  Primary  approval  from  local 
IRB;  Secondary  approval  from  the  funding  agency. 

Georgetown  University  human  subjects’  expedited  review  approval  was  received  first  on  August 
21,  2003.  The  continuing  approvals  have  been  received  with  the  next  due  on  June  14,  2007. 

The  second  human  subjects’  approval  came  from  the  regional  IRB  for  each  of  the  American  In¬ 
dian,  Alaskan  Native,  and  Native  Hawaiian  communities,  and  for  National  Naval  Medical  Center 
(NNNMC),  These  are  referred  to  as  the  primary  IRB  approvals.  Each  study  site  submitted  a 
protocol  and  consent  form  adapted  to  their  individual  needs.  The  Native  American  and  Alaskan 
Native  communities  received  approval  from  various  Indian  Health  Service  (IHS)  IRB  commit- 
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tees.  For  those  IHS  sites  where  there  was  no  active  local  IRB,  authorization  came  through  IHS 
Headquarters  in  Bethesda,  Maryland.  The  various  IHS  area  IRB  committees  are  located  in:  An¬ 
chorage,  Alaska;  Aberdeen,  South  Dakota;  and  Portland,  Oregon;  Primary  approval  for  the  Na¬ 
tive  Hawaiian  study  came  from  the  Native  Hawaiian  Healthcare  Systems  IRB.  NNMC  has  its 
own  IRB  committee. 

The  third  and  final  authorization  came  from  the  Human  Subjects  Research  Review  Board 
(HSRRB)/Office  of  Regulatory  Compliance  and  Quality  (RCQ),  United  States  Army  Medical 
Research  and  Materiel  Command.  This  is  referred  to  as  secondary  approval.  The  chart  included 
above  in  the  program  setup  section  number  8  lists  the  dates  that  each  site  received  primary  and 
secondary  IRB  approval. 

Issues  and  recommendations 

Issue:  Dealing  with  multiple  Institutional  Review  Boards 

At  the  start  of  the  project,  each  study  site  submitted  a  protocol  to  their  local  IRB  for  approval. 

1  he  local  IRB  would  review  the  protocol  then  send  it  back  to  the  site,  sometimes  as  much  as  4-6 
months  later,  requesting  that  portions  of  the  document  be  revised.  Study  personnel  made  the  re¬ 
visions  and  the  document  wras  resubmitted  for  approval.  This  process  was  often  repeated  several 
times  before  final  authorization  was  received.  Once  approved  by  the  local  IRB,  the  protocol 
was  sent  to  HSRRB  at  USAMRMC  to  undergo  an  even  more  rigorous  review  and  revision.  Any 
revisions  imposed  by  HSRRB  had  to  again  be  approved  by  the  local  IRB. 

Recommendation :  Submit  the  protocol  to  HSRRB  first.  Since  their  review'  process  is  more  rig¬ 
orous,  errors  in  the  protocol  can  be  corrected  before  it  is  ever  sent  to  the  local  IRB.  In  turn,  the 
local  IRB  starts  wTith  a  superior  product,  which  has  the  potential  to  decrease  the  time  it  takes  for 
the  Board  to  give  their  approval.  If  the  local  IRB  does  make  a  change,  it  will  most  likely  be  a 
minor  one  that  can  be  quickly  reviewed  by  HSRRB  and  approved. 

Issue:  Dissemination  of  project  results 

One  local  IRB  had  concerns  about  control  and  dissemination  of  project  results.  These  concerns 
were  based  on  their  experiences  in  other  multi-center  projects  involving  tribal  communities. 

Recommendation:  1  he  local  IRB  proposed  that  the  Georgetown  Contracts  Office  issues  a  Data 
Sharing  Agreement.  The  agreement  is  between  the  ISIS  Center  and  the  health  clinic  conducting 
the  study.  The  agreement  covers  the  follow  topics:  publishing,  use  of  data,  privacy  and  protec¬ 
tion  of  data  and  rights  of  the  Federal  Government. 

Technical  evaluation  -  Software  Modifications 

One  important  objective  of  the  Medical  Vanguard  Diabetes  Management  Project  is  to  determine 
the  modifications  to  be  made  to  the  user  interface  of  the  MyCareTeam  software  to  make  it  more 
culturally  acceptable  to  the  different  Native  Communities.  To  this  end,  when  the  software  was 
demonstrated  to  each  site,  the  project  team  members  (management  and  clinical)  were  asked  to 
identify  areas  of  the  site  that  should  be  changed  to  make  the  softw  are  more  appealing  to  Native 
American  users.  A  summary  of  the  changes  requested  are  given  in  Table  5.0. 
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All  of  the  Native  Communities  requested  a  change  to  the  outside  building  -  the  entrance  to  the 
MyCareTeam  Virtual  Clinic.  The  original  image  was  of  a  glass  and  brick  high  rise  and  the  new 
clinic  image  is  of  a  single  story  rural  clinic.  The  name  on  the  clinic  changes  for  each  site,  some 
vegetation  was  added  for  the  Hawaii  site,  and  the  snow  which  covers  the  land  and  falls  during 
the  winter  was  turned  off  for  the  Hawaii  and  Alabama  site. 

Next,  the  images  in  the  lobby  area  of  the  site  were  also  changed  to  be  more  appealing  to  the  Na¬ 
tive  American  users.  The  colors  used  in  the  lobby  were  changed  to  be  more  earth  tones;  the  re¬ 
ceptionist  was  redrawn  to  make  her  more  culturally  familiar.  Appendix  A  contains  screen  shots 
of  the  pages  within  the  MyCareTeam  application  that  have  been  significantly  changed  based  on 
the  requests  of  the  Native  Communities.  Another  change  made  to  the  lobby  area  was  to  include 
some  Hawaiian  words  for  the  Hawaiian  clinics. 

Many  changes  were  implemented  for  NNMC  since  treating  pregnant  women  with  diabetes  is  dif¬ 
ferent  than  treating  non-pregnant  type  1  or  type  2  diabetic  patients.  The  blood  sugar  log  book 
was  modified  to  accommodate  the  NNMC  patients.  It  is  very  important  to  the  diabetes  manage¬ 
ment  of  pregnant  women  to  know  when  a  blood  sugar  reading  was  taken  in  reference  to  when  the 
woman  ate  her  meal.  Therefore,  each  participant  from  NNMC  must  categorize  each  and  every 
blood  sugar  reading  that  is  uploaded  to  the  site  and  mark  whether  the  reading  was  taken  in  early 
am,  fasting,  post-breakfast,  pre-lunch,  post-lunch,  pre-dinner,  post-dinner,  or  bedtime.  The 
women  are  also  asked  to  enter  whether  they  modified  their  insulin  or  oral  medication  so  that  the 
information  is  available  to  the  provider.  The  new  blood  sugar  log  book  now  contains  different 
time  slots  that  correspond  to  the  meal-times  listed  above  and  also  has  their  medications  displayed 
in  the  log  book. 

Another  change  that  was  made  for  NNMC  patients  was  to  allow  them  to  connect  their  glucose 
meter  directly  to  their  computer  instead  of  using  the  modem  device.  It  turns  out  that  many  of  the 
women  who  receive  their  care  from  NNMC  do  not  have  landline  telephones  at  home  but  only 
cell  phones.  These  women  tend  to  have  high-speed  Internet  connections  so  they  can  access  the 
Internet  easily,  just  not  a  standard  POTS  line. 


Change  Requested 

Sites  Requesting  Changes 

Outside  of  Building 

All  Native  Communities 

Lobby  Colors  &  Receptionist 

All  Native  Communities 

Use  of  Native  language 

Hawaii 

Categorization  of  readings 

NNMC 

Redesign  of  blood  sugar  log  book 

NNMC 

Direct  Connection  of  glucose  meter 

NNMC 

Table  5.0  List  of  Changes  by  Site 


Issues:  Understand  the  Culture  of  the  people  using  the  site 

It  is  very  important  hat  the  look  and  feel  of  the  web  site  be  desirable  to  the  population  that  is  go¬ 
ing  to  use  it.  The  functionality  needs  to  be  appropriate,  but  if  it  is  not  appealing  it  won’t  be  used. 

Recommendation:  Work  closely  to  understand  the  population  that  will  be  using  the  software  and 
spend  time  with  them  playing  with  the  site  to  get  their  true  feedback.  It  may  take  a  number  of 
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iterations  to  get  the  changes  right  and  it  may  take  them  using  the  site  clinically  before  they  truly 
understand  their  needs. 

Technical  Evaluation  -  Infrastructure  setup 

In  order  for  the  MyCareTeam  application  to  be  successful,  the  people  using  it  must  be  able  to 
transmit  their  glucose  readings  from  their  meters  electronically  and  easily  to  a  secured  database. 
People  will  need  to  have  some  technology  convenient  to  them  to  make  the  transfer.  Two  tech¬ 
nologies  were  identified  to  make  this  process  easy.  First,  telephone  modem  devices  were  identi¬ 
fied  that  allowed  people  to  connect  their  glucose  meter  directly  to  the  device  and  push  a  single 
button  to  transfer  the  data  out  of  the  meter  to  the  database.  The  setup  on  these  devices  is  also 
quite  simple.  However,  some  people  no  longer  have  analogue  telephone  lines  at  home  and  then 
the  modem  device  will  not  work.  For  those  people,  we  callow  them  to  connect  their  glucose  me¬ 
ter  directly  to  a  serial  or  USB  port  on  their  computer  and  use  and  Active-X  program  to  transfer 
the  readings.  For  this  solution,  people  must  have  direct  access  to  a  PC  and  the  Internet. 

At  the  ISIS  Center,  modem  servers  were  installed  to  receive  the  glucose  readings  coming  from 
the  AccuLink  or  TeleCliniQ  devices.  These  servers  are  software  provided  by  the  manufacturer 
of  the  modem  device.  Each  server  can  handle  only  a  single  telephone  line  and  thus  each  server 
needed  to  run  on  a  separate  computer.  Currently,  we  have  two  modem  servers  running  con¬ 
nected  to  two  separate  toll-free  phone  lines. 

Issues  and  recommendations 

Issues:  Availability  of  home  telephone  lines 

While  the  modem  devices  are  a  reai  simple  way  to  transfer  the  glucose  readings  from  the  meters 
to  the  secured  database,  having  a  single  solution  may  not  be  enough.  All  the  Native  participants 
have  home  telephones,  but  many  of  the  NNMC  participants  did  not. 

Recommendation:  The  direct  connect  solution  for  patients  to  transfer  their  readings  was  required 
to  improve  recruitment  at  the  NNMC.  If  we  did  not  have  a  solution  for  people  without  tele¬ 
phones,  our  recruitment  would  have  been  much  slower  at  NNMC. 

Issue:  Access  to  the  Internet  and  Internet  knowledge 

Most  of  the  Native  Communities  felt  that  only  a  small  percentage  of  their  adult  patients  with  type 
2  diabetes  would  have  access  to  a  computer  and  an  even  smaller  number  would  have  experience 
with  the  Internet. 

Recommendation:  Just  because  people  may  not  have  experience  with  the  Internet  does  not  mean 
they  don’t  want  to  learn.  It  is  critical  to  make  technology  conveniently  available  to  the  people  in 
the  study  so  that  they  can  learn  to  use  and  become  familiar  with  it.  It  may  also  be  necessary  to 
have  support  available  at  the  public  sites  where  people  may  access  the  MyCareTeam  site. 

Security  evaluation  -  Current  infrastructure  evaluation 

MyCareTeam  is  designed  to  comply  with  Health  Insurance  Portability  and  Accountability  Act 
(HIPAA)  requirements,  and  implemented  security  measures  assure  data  integrity  and  confidenti¬ 
ality.  Built-in  authentication  mechanism  and  access  controls  for  data  access,  viewing,  and  updat¬ 
ing.  All  system  components  (database  and  web  servers)  reside  behind  a  firewall. 
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INTERNET 


The  ISIS  Intranet  is  composed  of  multiple  interfaces  with  rules  and  policies  governing  the  flow 
of  traffic  to  different  subnets  and  hosts  on  those  subnets.  The  web  server  is  located  on  a  demilita¬ 
rized  (DMZ)  which  is  behind  the  firewall  to  ward  off  potential  attacks.  Only  web  traffic  is  al¬ 
lowed  to  access  the  server  from  the  Internet.  The  database  is  hosted  on  another  server  that  is 
connected  to  a  highly  secured  subnet  of  the  ISIS  Intranet.  Communication  to  the  database  server 
is  encrypted  and  only  the  ports  required  by  SQL  on  the  web  server  are  permitted  to  communicate 
with  the  database  server.  These  measures  minimize  the  risk  of  the  web  or  database  servers  being 
hacked  or  attacked  by  outsiders;  they  also  prevent  insiders  from  gaining  unauthorized  access  and 
or  altering  the  data. 


A  Cisco  Pix  Firewall  515  E  with  6  interfaces  is  used  to  protect  the  ISIS  Intranet.  All  six  inter¬ 
faces  of  the  Cisco  PIX  515E  firewall  are  assigned  (Figure  3.0)  as  follows: 

“outside”  The  outside  interface  -  all  traffic  to  protected  segments  passes  through  this  inter¬ 
face 

“inside”  The  Patient  Information  segment  -  sensitive  Patient  information  is  housed  here 
because  there  is  limited  access  to  this  segment 

“vpn”  Virtual  Private  Network  Segment  -  a  Cisco  3640  router  is  used  on  this  segment  to 

permit  authorized  ISIS  users  remote  access  to  sensitive  parts  of  the  network. 

“isis”  ISIS  Segment  -  is  where  the  computers  and  peripherals  used  by  Members  for 

daily  tasks  —  email,  printing,  Internet  access,  etc  -  are  housed 
“dmz”  Demilitarized  Zone  -  Contains  a  number  of  servers  that  are  publicly  accessible  but 

also  maintain  a  modicum  of  protection  from  outside  attacks 
“Prototype”  Test  Segment  —  containing  a  number  of  Cisco  routers  and  switches,  database  serv¬ 
ers,  and  a  DNS  for  application  prototyping,  development,  and  testing. 


Each  interface  serves  one  or  more  subnets  with  hosts  that  require  varying  degrees  of  security. 
The  iirew'all  protects  all  systems  within  the  ISIS  Center  from  unauthorized  access  and  enforces 
security  policies  to  comply  with  current  standards  and  regulations  including  HIPAA. 


WIRELESS 

NETWORK 


WAN  Simulation 
&  Prototyping 


Data 

High  Security 
LAN 


ISIS 

nternal  users 
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Figure  3.0  Diagram  of  ISIS  Firewall  protections 
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Network  and  systems  scans  are  conducted  to  evaluate  current  information  security  and  data  in¬ 
tegrity.  both  in-transit  and  dormant.  As  a  result,  updates  and  system  changes  are  made  to  address 
current  security  threats.  Scans  evaluate  different  levels  of  security  threats  such  as  penetration 
testing,  patching  and  operating  system  updates,  user  accounts,  and  software  updates.  The  techni¬ 
cal  team  uses  scan  results  to  mitigate  the  risks. 

The  MyCareTeam  application  is  compliant  with  the  ISIS  Center’s  Information  Assurance  Policy, 
which  was  developed  to  protect  all  data  from  threats  that  could  compromise  the  privacy,  confi¬ 
dentiality.  integrity,  and  availability  of  information  assets.  The  ISIS  Center  Information  Assur¬ 
ance  Policy  is  included  in  Appendix  B. 


IMPLEMENTATION  PHASE 

The  evaluation  of  the  implementation  phase  assesses  the  operational  and  technical  features  of  the 
MyCareTeam  implementation  at  the  multiple  sites.  The  operational  and  technical  features  related 
to  the  implementation  phase  are  included  in  Table  6.0 


Category 


Key  Evaluation 


Operational 

features 


Technical 

features 


Training  &  Education 

•  Development  of  materials 

*  Training 

Patient  recruitment 

•  Develop  project  protocol 

•  Recruit  patients 

•  Enroll  patients 

Setup  and  implementa¬ 

•  Configure  H/W 

tion 

•  Program  modems 

•  Install  software 

Table  6.0Implementation  Phase 


Operational  Evaluation  -  Training  &  Education 

MyCareTeam  software  had  basic  diabetes  educational  materials  incorporated  as  part  of  the  site. 
The  Native  American  Communities  opted  to  use  the  Indian  Health  Service  Diabetes  Curriculum 
as  the  material  they  wanted  presented  to  their  participants.  During  the  first  two  years  of  the  pro¬ 
ject,  the  IHS  curriculum  was  converted  from  a  paper  based  curriculum  to  one  that  was  appropri¬ 
ate  for  patients  and  available  over  the  Internet  through  the  MyCareTeam  site. 

Similarly,  the  NNMC  clinical  team  provided  new  educational  materials  that  they  had  created  as 
paper- based  for  inclusion  on  the  Web  site  accessible  to  their  participants. 

Monthly,  news  articles  written  by  Nicole  Johnson,  Miss  America  1 999,  are  placed  on  the  My¬ 
CareTeam  site  and  made  available  to  all  users  of  the  site.  Nicole  writes  articles  related  to  the 
seasons,  new  advances  in  diabetes  research,  and  other  topics  of  general  interest  to  individuals 
with  diabetes. 

1  raining  of  the  project  management  and  clinical  teams  is  critical.  Training  them  closer  to  when 
they  begin  enrolling  patients  is  very  important.  If  they  are  trained  too  early,  they  will  not  remem¬ 
ber  how  to  use  the  site  and  will  require  retraining  once  they  begin. 
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A  fuli-day  training  program  was  set  up  at  the  ISIS  Center  and  1-2  members  of  the  project  and/or 
clinical  teams  were  encouraged  to  attend.  The  training  outline  was  included  in  last  year’s  annual 
report.  At  the  training  session,  the  consenting  process,  the  modem  devices,  the  administrative 
functions  of  MyCareTeam,  and  the  monitor  and  message  functions  are  reviewed. 

The  trainees  are  then  expected  to  return  to  their  respective  sites  and  take  a  train  the  trainer  ap¬ 
proach  and  train  others  on  their  project  and  clinical  teams  that  will  interact  with  the  software. 

Issues  and  recommendations 

Issue:  Preparation  of  appropriate  materials 

It  is  critical  that  the  educational  materials  presented  to  the  users  of  the  site  be  appropriate  to  their 
situation.  The  materials  presented  to  pregnant  women  in  an  urban  area  will  be  very  different 
than  that  presented  to  Hawaiian  men  with  diabetes. 

Recommendation:  Culturally,  there  are  many  ways  that  people  deal  with  and  think  about  chronic 
diseases  and  the  management  of  those  diseases.  Insuring  that  the  educational  materials  are  clini¬ 
cally  accurate  and  culturally  sensitive  makes  them  more  useful  to  the  people  reading  them.  Also, 
having  the  sites  direct  the  development  or  at  least  approve  the  information  contained  in  the  mate¬ 
rial  may  improve  the  amount  the  materials  are  recommended  to  patients  and  that  they  arc  used. 

Issue:  Training  should  occur  close  to  participant  enrollment 

It  is  olten  desired  to  train  the  users  of  the  system  prior  to  receiving  human  subjects’  approval. 
One  argument  lor  doing  this  is  so  that  they  can  provide  feedback  on  the  design  changes  and  so 
they  can  get  comfortable  with  technology. 

Recommendation:  We  found  that  it  is  better  to  train  the  users  closer  to  enrollment  so  that  they 
don't  forget  how  tot  use  the  site.  Also,  while  it  is  a  noble  thought  to  think  users  will  spend  the 
extra  months  getting  comfortable  with  the  technology,  in  reality  they  will  not  get  comfortable 
with  it  until  they  are  using  it  clinically.  So  either  plan  on  training  them  twice  -  once  for  them  to 
review  the  site  for  modifications  and  then  again  to  use  clinically,  or  demonstrate  it  to  them  on 
multiple  occasions  to  get  their  feedback  and  do  a  single  training  session  closer  to  the  project  ac¬ 
tual  start  date. 

Operational  Features  -  Patient  recruitment 

The  inclusion  and  exclusion  criteria  to  recruit  patients  at  each  site  were  defined  above  in  the  Re¬ 
cruitment  and  Operations  Section. 

Team  members  at  each  site  spoke  directly  to  their  patients  about  participation.  Some  sites  used 
public  announcements,  brochures,  or  flyers  for  recruitment. 

Patients  participating  from  the  Parshall  and  White  Shield  Health  Facilities  of  the  MHA  Nation 
received  a  small  gift  such  as  a  t-shirt  or  a  coffee  mug  for  being  in  this  study.  Those  patients  re¬ 
cruited  trom  the  Nimiipuu  Health  Clinic  from  the  Nez  Perce  reservation  were  given  a  small  gift 
at  the  time  they  enrolled  in  the  program.  If  they  continued  to  participate  in  the  study  they  re- 
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ceived  other  gifts  after  two,  four,  and  six  months.  The  incentive  program  is  outlined  above  under 
Clinical  Deployment  Section,  Recruitment  and  Operations. 


To  determine  if  the  recruitment  procedures  were  successful,  the  following  information  will  be 
collected  throughout  the  recruitment  period  from  all  the  sites: 

•  number  of  possible  participants 

•  number  of  patients  approached  about  participating 

•  number  of  patients  agreeing  to  participate 

Issues  and  recommendations 

Issue:  Recruitment  slower  than  expected 

At  most  of  the  sites,  the  actual  number  of  patients  fitting  the  inclusion  criteria  was  often  much 
less  than  the  perceived  number  when  the  site  was  first  asked  to  participate.  Because  of  this,  re¬ 
cruitment  was  much  slower  and  the  population  much  less  than  expected. 

Recommendation;  It  would  have  been  beneficial  to  ask  the  sites  to  cull  through  their  patient  re¬ 
cords  and  get  a  firmer  number  of  potential  participants.  Sites  with  dedicated  project  managers 
had  an  easier  lime  enrolling  patients  from  the  pool  of  possible  participants  than  did  those  sites 
that  relied  on  their  clinical  nurses  to  enroll  the  patients. 

Technical  Features  -  Setup  and  Implementation 

During  this  third  year,  we  ran  into  problems  with  the  implementation  of  some  of  the  modem  de¬ 
vices  and  glucose  meter  cables.  Problems  were  encountered  at  the  PBCI  site  with  reading  the 
data  from  the  glucose  meters.  Unfortunately,  these  problems  were  difficult  to  recreate  and  it 
took  a  visit  to  the  site  and  multiple  calls  to  the  manufacturer  of  the  glucose  meter  and  cables  to 
identify  the  problems.  Once  the  problem  was  identified,  it  took  a  couple  of  months  before  it  was 
resolved  because  the  problem  was  with  the  glucose  meter  cable  and  not  our  application.  Once 
the  manufacturer  replaced  the  broken  cables,  the  site  was  back  up  and  running  smoothly. 

Another  technical  problem  that  was  encountered  and  was  not  anticipated  was  the  use  of  a  modem 
device  that  would  reset  the  time  in  the  glucose  meter  if  it  differed  from  the  date/time  stamp  in  the 
modem  server.  Many  patients  that  use  glucose  meters  do  not  set  the  date  and  time  in  their  meter 
correctly  and  this  leads  to  many  problems  when  they  download  the  data  for  processing.  So  this 
feature  by  the  modem  device  manufacturer  was  a  great  idea  in  principal,  but  because  Hawaii 
does  not  follow  daylight  savings  time  (DST)  caused  many  problems  when  the  east  coast,  where 
the  modem  server  resides,  switched  to  DST. 

Issue:  Test  technology  thoroughly 

All  technology  that  is  delivered  to  the  clinical  sites  needs  to  be  fully  tested  prior  to  their  receiv¬ 
ing  it.  It  is  critical  to  the  acceptance  of  the  system  by  both  providers  and  patients  that  there  not 
many  distractions  due  to  technical  difficulties. 

Recommendation:  After  our  experience  with  the  PBCI,  we  started  having  all  modem  devices 
and  cables  shipped  to  the  ISIS  Center  first  where  we  thoroughly  tested  each  one  before  shipping 
them  out  to  the  site.  When  the  site  personnel  need  to  spend  time  troubleshooting  the  technology, 
reprogramming  modem  devices  or  finding  ways  to  work  around  technology  bugs,  their  accep¬ 
tance  rate  drops  fast  and  it  is  difficult  to  win  them  back. 

MONITORING  PHASE 
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The  monitoring  Phase  of  this  project  includes  Operational,  Technical,  Security,  and  Outcome 
evaluations.  While  this  phase  has  become,  evaluation  of  it  has  not.  Below  is  information  that  is 
being  collected  and  will  be  used  to  evaluate  the  monitoring  phase  of  the  project. 

Evaluating  Compliance  with  Clinical  Monitoring 

•  frequency  of  blood  sugar  testing 

•  frequency  of  sending  in  BG  values 

•  frequency  of  reviewing  BG  data  and  other  clinical  info  by  patient 

•  frequency  of  reviewing  BG  data  and  other  clinical  info  by  provider 

•  frequency  of  sending  comments  or  messages 

I  he  women  of  the  NNMC  are  asked  to  check  their  blood  sugar  readings  between  4  and  9  times 
per  day  depending  on  the  patient.  Data  will  be  analyzed  for  the  patients  by  looking  at  the  fre¬ 
quency  with  which  they  test  their  sugars  compared  to  what  they  were  asked  to  do.  These  values 
are  stored  in  or  can  be  calculated  from  the  MyCareTeam  database.  Similarly,  the  frequency  with 
which  patients  and  providers  review  data  in  the  database  and  message  one  another  can  be  deter¬ 
mined  from  the  data  stored  in  the  MyCareTeam  database.  Since  only  9  patients  are  currently  en¬ 
rolled  in  the  study  at  NNMC,  wre  have  not  begun  analyzing  the  data  received  so  far. 

Treatment  Changes 

•  number  of  changes  in  medications  by  care  provider 

•  Suggested  diet  or  exercise  changes  by  care  provider 

•  Number  of  messages  sent  to  patient  with  clinical  content,  suggestions,  or  advise 

The  amount  that  patients  and  providers  message  each  other,  the  types  of  messages  they  send  and 
the  frequency  with  which  providers  make  adjustments  in  medications  online  provide  an  indica¬ 
tion  of  how  accepted  the  technology  is  and  ho  w  useful  each  side  thinks  it  is.  This  coupled  with 
results  from  the  patient  satisfaction  surveys  will  be  used  to  determine  the  success  of  the  technol¬ 
ogy  insertion.  Again,  data  analysis  has  not  begun. 

Assessment  of  Clinical  Outcomes 

•  Change  in  Ale 

•  Change  in  Cholesterol  measures 

•  Change  in  BMI 

•  Change  in  numbers  of  hypo-  and  hyperglycemic  events 

•  Weight  of  baby  at  birth  (lor  NNMC) 

Diabetes  outcomes  are  measured  by  the  above  clinical  parameters.  Previous  studies  of  My¬ 
CareTeam  have  shown  improvements  in  AIC,  cholesterol  and  BP  while  showing  a  decline  in 
BMI  (Smith,  Levine,  et  al,  2004;  McMahon,  Gomes,  et  al.  2005).  It  is  expected  that  this  study 
will  show  similar  results.  Patients  will  have  regular  lab  tests  and  those  values  will  be  entered  in 
the  MyCare  I  earn  secured  database.  W  e  can  then  use  the  data  from  the  MyCareTeam  database  to 
analyze  the  clinical  outcomes  of  the  patients  enrolled.  As  stated  above,  we  will  look  at  the 
groups  of  individuals  that  showed  the  largest  improvement  in  clinical  parameters  and  determine 
the  characteristics  ol  the  population  as  well  as  the  actions  of  those  patients  to  determine  the  most 
effective  use  of  MyCareTeam. 
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Other  process  parameters  that  we  will  track  and  analyze  include  those  associated  with  inserting, 
maintaining  and  supporting  the  technology.  These  include  the  Use  of  the  MyCareTeam  tech¬ 
nologies,  training  users  on  the  system,  and  the  support  that  was  required  and  provided. 

Use  of  Technology 

•  Frequency  of  use 

•  Ease  of  use 

•  Most  used  features 

The  frequency  of  use  of  MyCareTeam  by  patients  will  be  collected  as  stated  earlier  —  by  review¬ 
ing  the  audit  trails  maintained  within  the  MyCareTeam  application.  These  audit  trails  track 
when  users  log  into  and  out  of  the  system  and  thus  how  long  they  are  engaged  can  be  calculated. 
We  track  how  often  the  patients  engage  in  some  of  the  features  of  MyCareTeam  like  exercise 
tracking,  communicating  with  their  providers,  and  maintaining  their  “other  medications”  list. 
Ihese  values  plus  a  short  survey  on  their  perceptions  regarding  ease  of  use,  features  they  like, 
and  those  they  say  they  use  most  will  be  used  to  evaluate  the  acceptance  of  the  technology  by  the 
patients.  We  have  begun  collecting  this  data  on  the  NNMC  patients  who  have  been  enrolled  in 
the  study.  Data  collection  for  NNMC  will  continue,  and  will  begin  for  the  Native  Communities 
throughout  the  third  year  of  the  study. 

We  also  track  how  frequently  providers  use  the  system  —  however,  they  may  be  more  likely  to 
use  the  system  even  if  they  don’t  find  it  intuitive  or  easy  to  use  if  their  patients  use  it.  We  have 
started  collecting  data  on  the  providers  at  the  NNMC  and  will  continue  to  do  so  throughout  the 
third  year.  Data  collection  of  providers  use  at  the  Native  Communities  will  begin  as  soon  as  pa¬ 
tients  are  enrolled. 

Support 

•  Number  of  support  calls  received 

•  Number  of  bugs  reported 

•  Number  of  fixes  made 

•  Amount  of  time  MyCareTeam  was  down 

Enrollment  of  patients  at  NNMC  began  February  2005  and  continued  through  the  end  of  the  sec¬ 
ond  year  of  the  study  August  30,  2005.  During  that  time,  three  support  calls  were  received  and 
logged.  One  was  from  a  provider  that  forgot  their  password,  and  the  other  two  were  because  the 
piovider  could  not  see  patient  data  that  was  in  the  database.  All  three  of  these  issues  were  re¬ 
solved  quickly. 

Support  logs  track  the  numbers  and  types  of  support  questions  that  are  raised,  how  they  are  fixed, 
and  the  length  of  time  between  the  support  request  being  filed  and  the  resolution  of  the  problem. 
E-mail,  telephone,  and  messages  from  within  MyCareTeam  are  all  available  for  providers  to  reg¬ 
ister  technical  problems  or  questions. 

Key  Research  Accomplishments: 

Mandan,  Hidatsa.  and  Arikara  Nation  (MHA) 
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•  Early  in  the  year,  biweekly  conference  call  meetings  were  initiated  between  the  principal  in¬ 
vestigator  at  MHA  Nation,  the  study  team  coordinator,  and  Pam  Angelus  at  the  ISIS  Center 
to  monitor  patient  enrollment.  The  site  was  encouraged  to  enroll  ten  patients  per  month  put¬ 
ting  them  on  target  to  reach  50  patients  by  the  end  of  February  2006. 

•  I  he  study  coordinator  notified  us  in  late  November  that  as  of  December  6  their  clinics  would 
switch  from  using  the  Accu-Chek  glucose  meter  to  the  Precision  Xtra.  This  required  a 
change  in  the  type  of  modem  device  that  study  patients  used  to  upload  their  data. 

•  Throughout  December  ‘05,  the  staff  at  Aerotel  Medical  worked  to  reconfigure  the  Tele- 
CliniQ  modem  to  work  with  the  new  Precision  Xtra  glucose  meters  now  being  used  at  the 
MHA  Nation  clinics.  At  the  same  time,  the  team  at  the  Poarch  Band  of  Creek  Indians  started 
experiencing  problems  with  their  older  Precision  meters  and  cables.  Recognizing  that  further 
testing  would  be  necessary,  before  these  meters  could  be  fully  operational  at  the  MHA  Na¬ 
tion,  Betty  Levine  and  the  PI  at  MHA  Nation  decided  to  temporarily  discontinue  the  project 
at  MHA  Nation  and  to  lay  off  the  study  coordinator.  This  action  was  taken  primarily  to  con¬ 
serve  financial  resources  until  enrollment  could  start  again. 

•  In  January  '06,  Abbott  Laboratories,  manufacturer  of  the  Precision  meter,  confirmed  that 
problems  existed  with  the  glucose  meter  cables  they  sold.  They  stopped  selling/shipping  the 
cables  and  began  a  process  of  scanning  and  testing  all  of  the  cables  they  had  in  stock  to  de¬ 
termine  which  ones  caused  problems  while  looking  for  a  new  cable  vendor.  On  March  24, 
2006  we  had  successful  completed  a  series  of  tests  using  the  Precision  Xtra  glucose  meter 
with  new  cables  provided  by  Abbott  and  the  Aerotel  TeleCliniQ  modem  and  that  the  study 
could  resume.  A  conference  call  was  held  on  April  10  with  Ms.  Hall-Thompson  and  the 
study  nurse,  Shasta  Mandan  for  the  purpose  of  developing  a  plan  to  restart  the  project  and  to 
contact  those  patients  enrolled  prior  to  December  2005.  In  order  to  continue  the  study,  these 
patients  needed  to  receive  the  Aerotel  modem  and  information  on  how  to  use  it.  We  also  dis¬ 
cussed  a  number  of  outstanding  invoice  issues  that  have  been  ongoing  since  2005.  We  were 
told  then  that  Ms.  Joan  Fredricks,  their  contracts  specialist  would  contact  use  regarding  the 
invoices.  We  were  contacted  this  past  summer  regarding  the  invoices  and  worked  with  Ms. 
Fredericks  to  get  them  paid.  It  has  been  difficult  to  get  the  site  to  restart  the  study  or  to  meet 
to  discuss  what  needs  to  be  done  to  restart  the  study. 

•  Annual  continuing  review  authorization  from  the  Aberdeen  Area  IRB  was  received  on  De¬ 
cember  13,  2005.  This  approval  was  submitted  to  HSRRB  on  December  29,  2005  and  ap¬ 
proval  was  received. 

•  At  this  point,  the  subcontract  between  MHA  Nation  and  Georgetown  University  has  expired 
and  we  are  waiting  to  have  further  discussions  regarding  their  intentions  before  restarting  it. 


Poarch  Band  of  Creek  Indians  TPBCD 

•  Continuing  review  approval  was  received  from  Dr.  Phillip  Smith  Chair,  National  IHS  IRB 
for  the  Poarch  Band  oi  Creek  Indians  on  August  31  2005.  A  modified  telephone  survey  was 
also  approved  which  will  be  used  as  part  of  the  study  evaluation  process.  The  selection  of 
Jamie  McGhee  to  replace  Annette  Hick  as  the  principal  investigator  for  the  Poarch  Band  site 
was  also  included  in  the  approval  from  Dr.  Smith  and  the  National  IHS  IRB. 

•  Biweekly  conference  call  meetings  take  place  between  the  principal  investigator  and  the 
study  nurse  to  monitor  patient  enrollment  at  this  site.  The  site  was  encouraged  to  complete 
patient  enrollment  by  the  end  of  February  so  the  subjects  will  have  a  full  six  months  to  use 
MyCareTeam  application  before  the  project  ends  in  August 
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•  A  total  of  25  patients  were  enrolled  in  the  project  at  Poarch  Band  of  Creek  Indians  clinic  in 
Atmore,  Alabama. 

•  The  telephone  surveys  were  carried  out  by  Pam  Angelus  of  the  ISIS  Center. 

•  [  he  study  coordinator  began  seeing  problems  with  patients  uploading  their  data  and  noticed 
error  messages  appearing  on  patients’  glucose  meters  in  December.  Their  equipment  was 
tested  at  the  ISIS  Center  but  the  problem  could  not  be  easily  or  consistently  recreated.  Pam 
Angelus  and  Ming-Jye  Hu  traveled  to  Alabama  in  January  to  resolve  the  problems.  Despite 
this  onsite  effort,  the  difficulties  continued.  After  returning  to  Washington,  we  received  the 
news  from  Abbott  that  their  Precision  Glucose  Meter  Cables  had  problems  and  that  were 
consistent  with  the  cable  problem.  The  Poarch  Creek  site  received  a  new  order  of  cables  on 
February  16,  2006  and  had  no  further  equipment  failures. 

•  The  subcontract  with  Poarch  Band  of  Creek  Indians  expired  on  August  31,  2006.  Once  our 
contract  modification  from  the  US  Army  was  received  on  September  6,  2006  we  were  able  to 
draw-up  a  new  contract  with  PBCI  and  it  should  be  executed  shortly. 

Papa  Ola  Lokahi 

•  Numerous  discussions  occurred  between  the  ISIS  Center  and  Papa  Ola  Lokahi  in  Hawaii  on 
how  to  modify  the  protocol  and  consent  form  based  on  discussions  with  the  Native  Hawaiian 
Health  Care  Systems  IRB.  These  discussions  centered  around  the  following  issues: 

1 .  Dc-Identifying  of  data  before  transmitting  it  to  the  MyCareTeam  database 
hosted  at  Georgetown  University 

2.  Statistical  methods  used  to  analyze  study  data 

3.  GAO  Report  and  its  relationship  to  this  project 

4.  Ownership  of  project  supplies  and  equipment 

•  Revisions  to  the  protocol  and  consent  documents  were  completed  and  returned  to  the  Native 
Hawaiian  IRB.  The  IRB  met  on  December  9  to  reconsider  the  project  for  approval  and  they 
granted  approval.  The  project  also  cleared  the  HSRRB  on  March  15,  2006. 

•  While  awaiting  HSRRB  approval,  the  project  team  held  weekly  conference  calls  to  identify 
alterations  to  the  website.  The  following  changes  were  made  to  accommodate  Native  Hawai¬ 
ian  project  team:  native  plants  and  accessories  were  added  to  the  images  of  the  clinic  build¬ 
ing  and  reception  area;  the  physical  appearance  of  the  clinic  receptionist  was  changed  to  ap¬ 
pear  more  Native  Hawaiian;  add  Hawaiian  words  to  parts  of  the  site  -  in  order  to  do  this  we 
purchased  the  software  package  Guava  Graphics  to  allow  us  to  properly  accent  words  in  the 
Hawaiian  language. 

•  The  Aerotel  modems  that  will  be  used  by  the  two  clinics  were  shipped  to  the  ISIS  Center, 
before  going  on  to  Hawaii.  They  were  thoroughly  tested  and  each  modem  programmed  in 
our  lab.  We  felt  that  this  would  allow  us  to  identify  any  potential  problems  that  might  occur 
and  possibly  delay  the  project.  The  Aerotel  modems  are  designed  to  reset  the  date  and  time 
on  the  glucose  meters  based  on  a  time  zone  flag  programmed  into  each  modem.  However, 
since  Hawaii  does  not  follow  daylight  savings  time,  this  becomes  an  issue  when  the  rest  of 
the  country  switches  between  standard  and  daylight  savings  time.  Aerotel  disabled  this  fea¬ 
ture  in  the  modems  being  used  by  the  Hawaii  sites.  Once  the  updated  firmware  was  sent  to 
the  ISIS  Center,  we  reprogrammed  all  the  modems  and  they  were  shipped  to  Hawaii. 

•  Two  nurses  came  from  Hawaii  for  training  on  the  site.  One  is  the  head  nurse  from  the  Ke 
Ola  Mamo  clinic  in  Oahu  and  the  other  the  nurse  from  Na  Pu’uwai  in  Molokai. 
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•  15  patients  have  been  enrolled  between  the  two  clinics  at  this  time.  Each  clinic  has  agreed  to 
enroll  a  minimum  of  1 5  patients. 

•  The  subcontract  with  Papa  Ola  Lokahi  was  fully  executed  once  final  HSRRB  approval  was 
received.  However,  that  subcontract  did  expire  on  August  31 , 2006.  Once  our  contract 
modification  from  the  US  Army  was  received  on  September  6,  2006  we  were  able  to  draw-up 
a  new  contract  with  Papa  Ola  Lokahi  and  it  should  be  executed  shortly. 

Tlingit  and  Haida 

•  Final  project  approval  was  received  from  the  Alaska  Area  Institutional  Review  Board  on  Au¬ 
gust  3 1 .  The  study  team  completed  the  Human  Subjects  Protection  training.  The  training  cer¬ 
tifications  and  protocol  were  submitted  to  HSRRB  for  final  approval  and  it  was  received  on 
February  27,  2006. 

•  The  South  Eastern  Alaska  Regional  Health  Consortium  (SEARHC)  managed  the  study  on 
behalf  of  the  Tlingit  &  Haida  tribes  of  Alaska.  The  subcontract  to  SEARHC  was  completed 
in  November  and  signed  by  the  proper  SEARHC  officials.  The  diabetes  nurse  who  coordi¬ 
nated  the  study  was  trained  at  the  ISIS  Center  on  November  4. 

•  A  total  of  1 3  patients  were  enrolled  in  the  study  and  the  study  nurse  was  not  able  to  recruit 
any  others.  Discussions  were  had  to  reduce  the  inclusion  criteria  to  patients  with  very  good 
glycemic  control  -  however  the  study  team  at  SEARHC  felt  this  would  not  really  help. 

•  In  a  conference  call  held  with  SEARHC  study  team  on  July  26, 2006,  the  decision  was  made 
to  shut  down  the  project  at  their  site.  They  did  not  feel  that  they  could  recruit  near  the  num¬ 
ber  of  patients  originally  identified.  The  study  nurse  thought  the  project  required  more  of  her 
time  than  she  expected  and  the  PI  felt  that  they  did  not  understand  their  patient  population 
fully. 

•  As  of  August  3 1 ,  2006  the  subcontract  between  SEARHC  and  GU  expired  and  it  will  not  be 
re-executed. 

Nez  Perce 

•  Human  Subjects  training  certifications  and  the  IRB  protocol  were  submitted  to  HSRRB  and 
were  approved  on  February  14,  2006 

•  A  full  time  project  coordinator  and  part  time  assistant  coordinator  were  hired  during  this  year 
to  manage  the  project  at  the  Nimiipuu  Health  Clinic.  They  both  traveled  to  GU  for  training 
in  January  2006  and  enrollment  began  in  February  2006. 

•  Final  approval  on  several  protocol  amendments  were  received  this  year  including  replacing 
Dr.  Valerie  Foxas  principal  investigator  with  Patricia  Harround,  FNP;  addition  of  the  study 
coordinators  to  the  protocol;  and  several  changes  to  the  Satisfaction  With  Telemedicine  Sur¬ 
vey.  One  study  coordinator  resigned  during  the  year  after  being  elected  to  the  Nez  Perce 
Tribal  Board.  The  team  continues  to  monitor  their  progress  and  will  replace  the  assistant  co¬ 
ordinator  if  necessary. 

•  Twenty-nine  patients  are  currently  enrolled  in  the  study. 

•  1  he  subcontract  with  the  Nez  Perce  expired  on  August  31,  2006.  Once  our  contract  modifi¬ 
cation  from  the  US  Army  was  received  on  September  6,  2006  we  drew-up  a  new  contract 
with  the  Nez  Perce  and  it  should  be  executed  shortly 

Wampanoag  Tribe  of  Gay  Head 
1 .  No  further  progress. 
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Rosebud  Sioux 

1 .  No  further  progress. 

Mescalero 

1 .  No  further  progress.  They  have  chosen  not  to  participate  at  this  time. 

Oglala  Sioux 

1 .  No  further  progress. 

National  Naval  Medical  Center 

•  Discussions  were  held  with  the  NNMC  study  team  to  discuss  strategies  lor  increasing  patient 
enrollment. 

o  A  recruitment  brochure  was  developed  and  approved  by  the  NNMC  and  Georgetown 
IRBs  and  HSRRB  to  give  to  potential  study  patients, 
o  It  was  decided  to  investigate  the  inclusion  of  patients  on  insulin  pumps  -  a  subset  of 
their  population  that  they  chose  to  exclude  originally.  This  new  feature  would  assist 
the  providers  by  including  insulin  pump  prescriptions  for  those  patients  using  a  pump 
for  diabetes  management  and  would  require  the  patient  to  enter  their  insulin  boluses 
that  they  administered  throughout  the  day.  A  meeting  was  held  with  an  Endocrine 
nurse  at  NNMC  to  discuss  how  best  to  implement  this  feature, 
o  A  protocol  amendment  was  filed  and  approved  that  allows  patients  with  only  cellular 
phone  service  to  be  enrolled  in  the  study.  The  original  protocol  allowed  only  those 
patients  with  land  line  phones  to  enroll  in  the  project.  The  addition  of  patients  with¬ 
out  land  line  phones  requires  them  to  connect  their  glucose  meters  directly  to  their 
computers  to  transfer  the  glucose  readings.  Currently  the  readings  are  transferred  via 
telephone  modem.  It  was  identified  that  a  fair  number  of  NNMC  patients  do  not  have 
land  line  telephones  but  do  have  access  to  personal  computers  and  the  Internet. 

•  Dr.  Macedonia  returned  from  his  deployment  in  Iraq  and  was  briefed  on  the  progress  of  the 
study.  He  did  not  take  over  as  PI  again,  but  it  was  left  with  Dr.  Sabi. 

•  lo  date  35  patients  have  been  enrolled  in  the  study.  Satisfaction  surveys  have  been  adminis¬ 
tered  on  all  enrolled  patients. 

•  A  cooperative  research  and  development  agreement  exists  between  NNMC  and  GU  and  is 
currently  up-to-date. 

Advisory  Board 

•  During  this  past  year  we  held  one  Advisory  board  conference  call  and  one  face-to-face  meet¬ 
ing. 

•  five  board  members  were  in  attendance  for  the  conference  call.  The  minutes  from  confer¬ 
ence  call  are  attached  to  this  report  in  Appendix  C. 

•  1  he  face-to-face  meeting  was  held  on  June  9,  2006  in  Washington,  Dc.  This  time  was  se¬ 
lected  to  coincide  with  the  American  Diabetes  Association  Annual  Meeting  and  we  had 
hoped  many  board  member  s  would  be  in  towrn  attending  the  meeting.  Four  board  members 
were  able  to  make  the  meeting.  Study  coordinators  from  3  of  the  sites  were  invited  to  give 
presentations  to  the  board.  A  few  outside  individuals  also  attended.  The  minutes  are  at¬ 
tached  to  this  report  in  Appendix  D. 
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Reportable  Outcomes: 

Presentations 

o  Pam  Angelus  attended  the  Diabetes  Best  Practice  Conference  at  Washington  Hospital 
Center  on  April  20,  2006.  The  conference  was  organized  by  the  MedStar  Diabetes 
Institute  and  Michelle  Magee,  MD  a  Sacred  Breath  Advisory  Board  member.  Infor¬ 
mation  regarding  effective  outpatient  glycemic  control  was  discussed. 

o  Betty  Levine  attended  the  1st  transdisci  pi  inary  Conference  on  Distributed  Diagnosis 
and  Home  Healthcare  April  3-4  in  Arlington,  VA.  The  meeting  was  sponsored  by 
IEEE  EMBS  society.  Ms.  Levine  and  her  co-authors  were  Red  Ribbon  Winners  for 
their  poster  titled  “The  Case  for  Applying  the  Point  of  Care  Testing  Standard  to 
Home  Monitoring  Devices”.  The  poster  focused  on  their  working  connecting  multi¬ 
ple  vendor  blood  glucose  and  pressure  meters  to  computers  to  retrieve  the  clinical 
data  stored  within  the  devices. 

o  Betty  Levine  attended  the  NIBIB  Point  of  Care  Technologies  Workshop  held  in  Crys¬ 
tal  City  Virginia  on  April  1 1th  and  12.  They  presented  their  poster  titled  “The  Case 
ior  Applying  the  Point  ot  Care  Testing  Standard  to  Home  Monitoring  Devices”. 

o  April  1,  2006,  Betty  Levine  presented  to  the  Capital  Hill  Steering  Committee  on 
TeleHealth  and  Healthcare  Informatics  in  a  session  entitled:  “Distributed  Technolo¬ 
gies  for  Alternate  Care  Delivery  Sites:  Community  Health  Centers;  Home  Care; 
Nursing  Homes;  and  Rural  Health  Clinics”.  The  presentation  “IT  for  Chronic  Illness 
Management  in  the  Home  “  presented  on  the  Medical  Vanguard  Diabetes  Manage¬ 
ment  Project  as  well  as  a  Congestive  Heart  Failure  Home  monitoring  project  recently 
completed  at  GUMC. 

o  We  once  again  presented  our  technology  at  the  Capitol  Hill  Steering  Committee  on 
TeleHealth  and  Healthcare  Informatics’  annual  all-day  Health  Information  Technol¬ 
ogy  Demonstration  and  Discussion  on  Tuesday,  June  6,  2006.  The  MyCareTeain  ap¬ 
plication  and  more  specifically  the  Medical  Vanguard  Diabetes  Management  sites 
were  highlighted 

Funding  applied  for  based  on  work  supported  by  this  award 

a.  NIH  STTR  Phase  I:  “Hypertension  Software  Tool  to  Improve  Clinical  Management”. 
Submitted  April  1  2006,  not  funded. 

Conclusions: 

Ihis  third  year  ol  the  Medical  Vanguard  Diabetes  Management  Project  saw  much  progress.  The 
human  subjects  requirements  and  subcontracting  tasks  have  all  been  completed  and  approved 
for  all  the  sites.  All  of  our  sites  are  now  in  a  position  to  recruit  and  enroll  participants. 

We  have  had  two  set  backs  this  year.  The  first  being  the  break  in  forward  progress  with  the 
MHA  Nation  of  North  Dakota  and  the  second  being  the  decision  by  SEAHRC  to  shut  down  the 


W  8 1 X  WH-04-2-0002 


35 


project.  As  explained  in  this  report,  the  switch  of  blood  sugar  monitoring  technology  at  the 
MHA  Nation  health  clinics  forced  a  change  in  the  technology  to  be  used  by  their  patients.  This 
required  a  shutdown  of  a  couple  of  months  which  we  have  not  been  able  to  recover  from.  We 
still  try  to  get  the  site  to  restart  and  will  not  give  up  until  we  receive  formal  request  from  them  to 
shut  it  down.  Unfortunately,  SEAHRC  that  was  running  the  project  on  behalf  of  the  Tlingit  and 
Haida  tribes  of  Alaska  has  requested  that  the  project  be  stopped  at  their  site.  They  were  not  able 
to  recruit  enough  participants  to  make  continuation  feasible.  The  month  of  September  was  spent 
working  with  them  to  notify  the  IRBs  of  their  decision,  contact  patients  and  return  unused 
equipment. 

The  clinical  personnel  at  each  site  continue  to  provide  valuable  feedback  regarding  modification 
and  additional  features  to  MyCareTeam  that  fit  their  specific  clinical  needs.  A  personalized 
MyCareTeam  site  was  created  this  year  for  the  Native  Hawaiian  clinics.  This  personalized  site 
allows  the  patients  and  providers  affiliated  with  the  Native  Hawaiian  Clinics  to  feel  more  com¬ 
fortable  using  the  technology. 

Patient  satisfaction  surveys  have  been  administered  to  all  of  the  patients  enrolled  at  all  the  sites, 
those  that  have  been  enrolled  in  the  study  long  enough  have  completed  their  follow-on  survey. 
The  results  of  these  surveys  will  be  analyzed  to  determine  how  satisfied  the  patients  are  using  the 
technology  to  monitor  their  diabetes  and  to  communicate  with  their  healthcare  team.  Providers 
give  their  feedback  on  the  use  of  the  technology  through  more  informal  means. 

References: 
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Appendix  A 

Screen  Shots  of  Pages  changed  this  year 


1 .  Outside  of  building  for  Hawaii  Sites 

2.  Lobby,  Receptionist,  and  Hawaiian  words  for  Hawaii  Sites 

3.  Direct  Connect  of  Glucose  Meters  for  NNMC 
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ISIS  CENTER  INFORMATION  ASSURANCE  POLICY 


Table  of  Contents 

I.  Statement  of  Purpose  and  Scope 

II.  Philosophy 

III.  Security  Roles  and  Responsibilities 

IV.  Administrative  Safeguards 

V.  Physical  Safeguards 

VI.  Technical  Safeguards 


1.  I.  STATEMENT 

2.  Purpose 

3.  The  ISIS  Center  Information  Assurance  Policy  (the  “  ISIS  IA  Policy”)  serves  to 
create  an  environment  that  will  help  protect  all  members  of  the  ISIS  Center,  their 
academic,  commercial  and  government  partners,  and  their  customers  and  patients 
from  threats  that  could  compromise  the  privacy,  confidentiality,  integrity  and 
availability  of  information  assets  and,  thereby,  damage  their  reputations,  life  or 
safety,  productivity,  intellectual  or  commercial  interests,  mission  readiness,  or  fi¬ 
nancial  well-being.  The  ISIS  IA  Policy  recognizes  the  vital  role  information 
plays  in  the  ISIS  Center’s  activities  and  helps  establishes  means  to  protect  infor¬ 
mation  in  all  forms  from  harm.  The  ISIS  IA  Policy  supplements  and  functions  in 
coordination  with  the  Georgetown  University  Information  Security  Policy  (“GU 
IS  Policy”-  see  Appendix  A).  The  ISIS  Center  will  establish  a  baseline  informa¬ 
tion  assurance  program  designed  to  protect  the  range  of  assets  typically  managed 
in  its  everyday  work.  Individual  ISIS  Center  divisions  or  projects  may  and  shall 
supplement  the  ISIS  IA  Policy  as  necessary  to  protect  special  information  assets, 
address  individual  vulnerabilities  or  mitigate  specific  threats.  The  ISIS  Center 
will  review  and  revise  this  policy  upon  detecting  a  deficiency  of  policy  or  proce¬ 
dure,  becoming  aware  of  a  relevant  change  in  its  academic,  commercial.  legal  or 
regulatory  environment,  and,  at  least,  annually. 

i.  The  ISIS  Center  manages  information  and  information  assets  of  many  types  in  the 
course  of  conducting  its  routine  research  and  development  as  well  as  administra¬ 
tive  work.  In  addition  to  complying  with  the  Georgetown  University  Information 
Security  Policy,  the  ISIS  Center  must  develop  supplementary  information  assur¬ 
ance  policies  and  procedures  to  address  the  specific  requirements  of  its  mission, 
operational  circumstances,  information  assets  and  business  partners.  The  policies 
that  follow  the  roles  and  responsibilities  sections  shadow  the  order  and  topics  of 
the  Security  Standards  and  Implementation  Specifications  of  the  Health  Insurance 
Portability  and  Accountability  Act  (HIPAA)  of  1996  because  ISIS  operates  pri¬ 
marily  in  the  health  care  arena,  works  primarily  with  health  care  partners,  occa¬ 
sionally  may  function  as  a  business  associate  of  HIPAA  covered  entities  and 
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must,  therefore,  demonstrate  its  compliance  with  HIPAA.  Because  ISIS  works 
with  partners  subject  to  the  information  assurance  policies  of  various  Federal 
agencies  such  as  the  Department  of  Defense,  the  Department  of  Homeland  Secu¬ 
rity,  the  Department  of  Health  and  Human  Services  and  the  Central  Intelligence 
Agency,  it  must  also  demonstrate  knowledge  and  adherence  when  relevant  to  their 
information  assurance  requirements.  ISIS  investigators  also  work  with  commer¬ 
cial  partners  who  share  proprietary  information  in  good  faith  and  under  non¬ 
disclosure  agreements.  If  commercial  partners  cannot  trust  ISIS  to  protect  their 
proprietary  information,  they  will  not  do  business  with  us.  Thus,  although  shad¬ 
owing  HIPAA,  the  ISIS  IA  Policies  encompass  broader  requirements  that  protect 
all  types  of  sensitive  but  unclassified  information.  If  a  project  develops  informa¬ 
tion  that  must  become  classified  in  accordance  with  Federal  rules  or  requirements, 
the  principal  investigator  must  find  another  home  for  it  outside  the  ISIS  network. 


4.  The  ISIS  IA  policy  contains  six  sections: 

5.  Scope 

6.  Persons 

7.  The  ISIS  I A  Policy  applies  directly  to  all  members  of  the  ISIS  faculty,  staff,  con¬ 

sultants,  temporary  employees,  volunteers  and  other  members  of  the  ISIS  com¬ 
munity  who  have  privileges  to  create,  review,  alter,  or  otherwise  use  ISIS  Center 
information  assets.  In  accordance  with  the  GU  IS  Policy,  ISIS  Center  faculty  and 
staff  play  roles  with  requisite  responsibilities  for  the  protection  of  ISIS  informa¬ 
tion  resources,  including: 

ii.  Steward:  individuals  with  primary  responsibility  for  specific  information  re¬ 
sources.  Stewards  may  or  may  not  be  the  owners  or  creators  of  their  informa¬ 
tion  resources  under  their  care.  For  example,  Principle  Investigators  function 
as  stewards  for  all  information  resources  in  their  research  projects  even  if 
other  faculty  or  staff  created  or  own  them. 

iii.  Users:  all  ISIS  members  function  as  users  of  and,  thus,  have  basic  responsi¬ 
bilities  to  protect  ISIS  information  resources. 

iv.  Managers:  Individuals  with  supervisory  or  management  responsibilities  in 
ISIS. 

v.  Information  Assurance  Officers:  Individuals  with  administrative  or  technical 
responsibilities  for  ISIS  information  assurance. 

8.  The  ISIS  IA  Policy  also  addresses  protection  of  information  resources  shared  be¬ 
tween  ISIS  members  and  academic,  commercial  and  government  partners.  The 
ISIS  IA  Policy  establishes  means  to  protect  information  resources  given  to  and 
obtained  from  partners  according  to  its  criticality  and  sensitivity  as  mutually 
agreed  and  formally  documented  in  the  data  sharing  agreement.  Such  agreements 
will  comply  with  the  requirements  of  any  and  all  relevant  local,  state  or  Federal 
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regulations  such  as  with  the  Health  Insurance  Portability  and  Accountability  Act 
(HIPAA)of  1996. 

9.  Information  Resources 

1 0.  The  ISIS  IA  Policy  applies  to  all  ISIS  Center  information  resources,  including 
those  used  by  Georgetown  University  or  the  ISIS  Center  under  license  or  contract. 
“Information  resources”  include  information  in  any  form  such  as  paper,  electronic 
media  or  the  spoken  word,  as  well  as  all  computer  and  communications  equip¬ 
ment  and  software. 

1 1 .  The  GU  IS  Policy  assigns  information  to  one  of  three  categories  depending  on  the 
level  of  security  required,  including  in  decreasing  order  to  sensitivity,  Confiden¬ 
tial,  Internal-Use-Only,  and  Unrestricted.  The  GU  IS  Policy  treats  Confidential 
and  Internal-Use-Only  information  as  Restricted. 

12.  Confidential  Information,  This  classification  covers  sensitive  information  about 
individuals,  including  information  identified  in  the  Human  Resources  Manual, 
and  sensitive  information  about  the  University,  including  the  ISIS  Center.  Confi¬ 
dential  information  requires  a  high  level  of  protection  against  unauthorized  dis¬ 
closure,  modification,  destruction  and  use.  See  Appendix  A,  Numbers  12  to  17 
for  specific  categories  of  Confidential  information  cited  in  the  GU  IS  Policy. 

13.  The  ISIS  Center  has  identified  specific  categories  of  information  falling  into  this 
category  that  are  routinely  created,  reviewed,  altered  or  otherwise  used  in  its  ac¬ 
tivities,  including: 

a.  Individually  identifiable  information  about  research  subjects 

b.  Commercial,  proprietary  information 

c.  Research  information,  including  data  and  protocols,  techniques,  hardware  or 
software  owned  by  ISIS  members 

d.  Unpublished  research  reports 

e.  Human  resources  information  about  ISIS  faculty  and  staff 

f.  ISIS  administrative  information  such  as  budgets  and  financial  reports 

g.  Information  security  data,  such  as  passwords,  risk  assessments,  and  informa¬ 
tion  about  security  incidents 

14.  Internal-use-only.  This  classification  covers  information  that  requires  protection 
against  unauthorized  disclosure,  modification,  destruction  and  use,  but  the  sensi¬ 
tivity  is  less  than  for  Confidential  information.  Examples  of  Internal-use-only  in¬ 
formation  include  internal  memos,  correspondence,  and  other  documents  subject 
to  controls  established  by  the  information  steward. 

15.  Unrestricted  information.  This  classification  covers  information  available  for 
disclosure  to  any  person  inside  or  outside  the  University.  Although  security 
mechanisms  are  not  needed  to  control  disclosure  and  dissemination,  they  are  still 
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required  to  protect  against  unauthorized  modification  and  destruction  of  informa¬ 
tion. 

16.  Default  classification.  Information  that  is  not  classified  explicitly  is  classified  by 
default  as  follows:  Information  falling  into  one  of  the  Confidential  categories 
listed  in  the  GU  IS  Policy  or  item  13  above  is  treated  as  Confidential.  Other  in¬ 
formation  is  treated  as  Internal-use-only  unless  it  is  published  (publicly  displayed 
in  any  medium)  by  the  Steward,  in  which  case  it  is  classified  Unrestricted. 

17.  II.  PHILOSOPHY 

1 8.  The  ISIS  I A  Policy  supports  the  philosophy  of  the  GU  IS  Policy,  particularly  its 
dedication  to  supporting  the  educational,  research  and  public  services  missions  of 
Georgetown  University  and  its  support  of  university  policies  regarding  informa¬ 
tion  access,  acceptable  use  and  privacy  (see  Appendix  B  and  Appendix  C) 

1 9.  The  ISIS  I A  Policy  seeks  to  ensure  that  all  ISIS  members  promote  the  ISIS  Cen¬ 
ter’s  reputation  as  a  responsible  research  partner  and  custodian  of  sensitive  infor¬ 
mation  through  practicing  sound  information  assurance  practices. 

20.  III.  SECURITY  ROLES  AND  RESPONSIBILITIES 

21 .  The  GU  IS  Policy  describes  in  detail  the  responsibilities  of  the  primary'  university 
1A  roles,  including  steward,  user,  manager,  information  service  providers,  the 
University  Information  Security  Officer,  Local  Information  Security  Personnel, 
the  Internal  Audit  and  Management  Analysis  Department,  and  the  University 
Counsel’s  Office.  The  ISIS  Center  will  work  with  representatives  of  the  various 
university  offices  with  information  assurance  responsibilities  as  required,  includ¬ 
ing  but  not  limited  to  the  University  Information  Security  Officer.  Four  roles  bear 
IA  responsibilities  in  the  ISIS  Center,  including  steward,  user,  manager,  and  in¬ 
formation  assurance  officer. 

22.  Stewards 

23.  Stewards  bear  primary  responsibility  for  protecting  information  resources  under 
their  care,  including  the  following  specific  responsibilities: 

a.  Discharge  responsibilities  of  all  users 

b.  When  necessary,  establish  security  policies  and  procedures  for  information 
under  their  care  above  and  beyond  existing  ISIS  Center  and  Georgetown  Uni¬ 
versity  information  assurance  policies 

c.  Assign  classifications  and  marking  information  for  all  information  under  their 
care 

d.  Authorize  individual  access  to  information  under  their  care 

e.  Ensure  life  cycle  documentation  about  the  creation,  storage,  use  and  destruc¬ 
tion  of  sensitive  and  other  information  under  their  care  as  necessary 
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f.  Report  known  and  suspected  security  incidents  to  their  Managers,  the  Univer¬ 
sity  Information  Security  Officer  or  others  as  required  by  the  situation. 

24.  In  the  ISIS  Center,  a  hierarchy  of  stewardship  assures  coordinated  responsibility 
through  the  information  resource  life  cycle  of  creation,  storage,  use  and  destruc¬ 
tion.  Responsibilities  include  the  following: 

a.  Principle  Investigator  functions  as  the  primary  steward  for  information  cre¬ 
ated,  stored,  used  and  destroyed  in  his  or  her  project. 

b.  Division  Director  functions  as  an  information  steward  under  three  conditions, 
including: 

1.  Secondary  steward  after  the  principle  investigators  for  project  information 
created,  stored,  used  and  destroyed  in  his  or  her  division 

ii.  Primary  steward  for  project  information  created,  stored,  used  and  de¬ 
stroyed  in  his  or  her  division  in  the  absence  or  upon  departure  of  a  princi¬ 
ple  investigator 

iii.  Primary  steward  for  administrative  information  pertaining  to  the  division. 

c.  ISIS  Director  functions  as  an  information  steward  under  three  conditions,  in¬ 
cluding: 

i.  Tertiary  steward  after  the  principle  investigators  and  division  directors  for 
project  information  created,  stored,  used  and  destroyed  in  the  ISIS  Center 

ii.  Primary  steward  for  division  information  in  the  absence  or  upon  departure 
of  the  division  director 

iii.  Primary  steward  for  administrative  information  pertaining  to  the  ISIS  Cen¬ 
ter. 

d.  Others  as  appointed  by  the  ISIS  Director 

25.  Users 

26.  All  members  of  ISIS  are  “Users”  of  the  information  resources  of  the  ISIS  Center 
and  Georgetown  University.  They  should  help  protect  information  resources  un¬ 
der  their  care  or  possession  in  whatever  form  they  appear.  The  GU  IS  Policy  (see 
Appendix  A,  Numbers  46-69  for  details)  lists  and  describes  in  detail  the  practices 
all  GU  users  should  follow,  including: 

a.  Become  familiar  with  and  adhere  to  University  policies 

b.  Implement  basic  physical  security  practices 

c.  Store  information  appropriately  according  to  its  classification 

d.  Distribute  and  transmission  information  appropriately  according  to  its  classifi¬ 
cation 

e.  Destroy  and  dispose  of  sensitive  information  using  appropriate  methods 

f.  Use  appropriately  created  passwords  to  identify  and  authenticate  themselves 
to  computer  systems.  Passwords  should  contains  at  least  8  characters  includ¬ 
ing  upper  and  lower  case  letters,  numbers  and  punctuation  characters  (where 
supported) 
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g.  Ensure  application  of  appropriate  measures  such  as  software  patches,  proper 
configurations  and  other  measures  to  their  computer  to  avoid  compromise  by 
external  or  internal  attackers. 

h.  Properly  configure  remote  access  capabilities  to  avoid  unauthorized  access 

i.  Log  off  from  all  applications,  computers  and  networks  when  finished 

j.  Employ  antivirus  and  malicious  code  protection  mechanisms 

k.  Comply  with  Georgetown  University’s  backups  and  record  retention  practice 
policy  (see  Appendix  D)  and  the  ISIS  Center’s  contingency  policies  on  back¬ 
ups. 

l.  Report  known  and  suspected  security  incidents  to  their  information  Stewards, 
Managers,  the  University  Information  Security  Officer  or  others  as  required 
by  the  situation. 

27.  Managers  (of  Users) 

28.  ISIS  Center  managers  include  the  Director,  Division  Directors,  faculty  who  su¬ 
pervise  students  or  staff  and  administrators  who  supervise  staff. 

a.  Discharge  responsibilities  of  all  users 

b.  When  necessary,  establish  security  policies  and  procedures  for  information 
under  their  care  above  and  beyond  existing  ISIS  Center  and  Georgetown  Uni¬ 
versity  information  assurance  policies 

c.  Authorize  individual  access  to  information  resources  following  the  standard 
ISIS  policies  and  procedures 

d.  Assure  all  users  under  their  supervision  receive  information  assurance  training 
and  awareness. 

e.  Report  known  and  suspected  security  incidents  to  their  information  Stewards, 
Managers,  the  University  Information  Security  Officer  or  others  as  required 
by  the  situation. 

29.  Information  Assurance  Officers 

30.  In  the  ISIS  Center,  multiple  people  bear  specific  responsibility  for  information  as¬ 
surance,  including  the  Directors  and  staff  of  both  the  Division  of  Engineering  and 
the  Division  of  Information  Assurance  and  Informatics.  The  Director  of  the  Divi¬ 
sion  of  Engineering  functions  as  the  ISIS  Technical  IA  Officer.  As  a  group,  they 
ensure  execution  of  the  information  security  responsibilities  assigned  to  the  In¬ 
formation  Service  Providers  in  the  GU  IS  Policy,  including 

a.  Establishing  security  policies  and  procedures, 

b.  Conducting  information  assurance  risk  assessments, 

c-  Developing,  implementing  and  evaluating  information  assurance  risk  man¬ 
agement  plans, 

d.  Develop  and  enforce  ISIS  security  incident  management  and  reporting  plan. 

e.  Developing,  deploying  and  testing  the  ISIS  contingency  plan  in  collaboration 
with  ISIS  faculty  and  staff 

f.  Developing,  deploying  and  testing  the  ISIS  security  awareness  and  training 
program  in  collaboration  with  ISIS  faculty  and  staff 
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g.  Coordinating  physical  security  with  the  ISIS  Director  and  other  managers, 

h.  Designing  the  ISIS  network  security  architecture 

i.  Implementing  technical  controls  to  protect  ISIS  information,  computers  and 
networks, 

j.  Deploying  technical  access  controls  to  enforce  Georgetown  and  ISIS  informa¬ 
tion  access  policies,  including  perimeter  defense  and  encryption  of  informa¬ 
tion  as  necessary 

k.  Deploying  technical  mechanisms  for  enforcing  Georgetown  and  ISIS  pass¬ 
word  policies 

l.  Deploying  technical  mechanisms  for  enforcing  Georgetown  and  ISIS  integrity 
requirements 

m.  Coordinating  ISIS  Center  information  assurance  issues  with  relevant  George¬ 
town  University  officials  as  necessary. 

n.  Coordinating  ISIS  responsibilities  under  special  initiatives  such  as  HIPAA. 

31.  IV.  ADMINISTRATIVE  SAFEGUARDS 

32.  Security  Management  Process 

33.  The  Director  of  the  ISIS  Center  in  collaboration  with  the  Heads  of  each  division, 
the  ISIS  IA  officers  and  project  leads  will  establish  a  comprehensive  security 
management  process  to  safeguard  information  systems  and  information  against 
sabotage,  tampering,  denial  of  service,  espionage,  fraud,  misappropriation,  mis¬ 
use,  or  release  to  unauthorized  persons  and  protect  hardware,  firmware,  software, 
and  information  against  unauthorized  disclosure,  destruction,  or  modification.  By 
establishing  safeguards  and  controls  they  will  protect  and  maintain  the  confidenti¬ 
ality,  integrity,  availability,  authentication,  and  non-repudiation  of  the  ISIS  Center 
information  system  resources  and  information  processed  throughout  the  life  cycle, 
including  those  of  research  and  commercial  partners.  Project  leaders  in  collabora¬ 
tion  with  the  ISIS  IA  Offices  shall  complete  a  “Project  IA  Specification”  docu¬ 
ment  for  each  project  under  their  supervision.  The  information  security  manage¬ 
ment  process  includes  four  major  functions,  namely  Information  security  risk  as¬ 
sessment,  risk  management,  developing  and  applying  sanction  policies  for  health 
information  security  breaches  by  ISIS  personnel  and  regular  review  of  health  in¬ 
formation  system  activity. 

34.  Risk  Assessment.  The  ISIS  IA  Officers  in  collaboration  with  representatives  of  all 
ISIS  divisions  shall  organize,  execute  and  document  accurate  and  thorough  as¬ 
sessments  of  the  potential  threats  and  vulnerabilities  to  the  confidentiality,  integ¬ 
rity,  and  availability  of  ISIS  information  and  associated  information  systems.  The 
risk  assessment  shall  include  evaluations  of  administrative  and  physical  vulner¬ 
abilities  of  the  ISIS  Center  as  well  as  technical  vulnerabilities  of  information  sys¬ 
tems.  When  selecting  protection  measures,  the  risk  assessment  team  shall  balance 
estimated  costs  of  controls  with  projected  losses  from  a  breach  as  a  criterion  for 
selecting  appropriate  solutions.  The  risk  assessment  team  shall  repeat  risk  as¬ 
sessments  of  information  and  associated  information  systems  in  its  possession  at 
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regular  intervals,  including  at  least  one  time  every  three  years,  upon  the  occasion 
of  a  breach  or  upon  a  major  change  in  system  configuration. 

35.  Risk  Management.  The  ISIS  IA  Officers  in  collaboration  with  representatives  of 
all  ISIS  divisions  shall  develop,  implement  and  document  administrative,  physi¬ 
cal,  and/or  technical  safeguards  sufficient  to  reduce  risks  and  vulnerabilities  to 
ISIS  information  and  associated  information  systems  to  a  reasonable  and  appro¬ 
priate  level  as  specified  by  good  information  assurance  practice  and  the  require¬ 
ments  of  its  business  partners  as  necessary.  The  ISIS  IA  Officers  shall  monitor 
the  effectiveness  and,  when  appropriate,  revise  safeguards  as  part  of  a  recurring 
cycle  of  information  security  risk  management.  The  ISIS  IA  Officers  will  ensure 
continuous  assessment,  implementation,  monitoring,  evaluation  and  revision  of 
the  ISIS  Center  information  assurance  posture  in  light  of  changing  circumstances 
in  its  organizational,  technical,  and/or  regulatory  environment. 

36.  Sanction  Policy.  Violations  of  the  security  policies  of  Georgetown  University  or 
the  ISIS  center  will  be  handled  consistent  with  the  applicable  University  discipli¬ 
nary  procedures.  Consistent  with  the  Georgetown  University  Computer  Systems 
Acceptable  Use  Policy  (see  Appendix  B),  the  ISIS  Center  may  temporarily  sus¬ 
pend,  block  or  restrict  access  to  information  and  network  resources  when  it  ap¬ 
pears  necessary  for  the  protection  of  the  integrity,  security  or  functionality  of  ISIS 
Center  or  University  resources  or  to  protect  the  ISIS  Center  or  the  University 
from  liability.  The  University  may  monitor  network  traffic  to  assure  the  contin¬ 
ued  integrity  and  security  of  University  resources  in  accordance  with  applicable 
Universities  policies  and  laws;  policies  and  procedures  are  subject  to  Internal  and 
External  Audit  review.  The  University  may  also  refer  suspected  violations  of  ap¬ 
plicable  law  to  appropriate  law  enforcement  agencies. 

37.  Information  System  Review.  The  ISIS  IA  Officers  will  ensure  audit  trail  records 
from  all  network  services  and  infrastructure  devices  are  regularly  reviewed  for  in¬ 
dications  of  inappropriate  or  unusual  activity,  including  daily  review  of  network 
access  logs,  firewall  activity  logs,  email  logs  and  spam,  and  anti-virus  server  logs. 
The  Division  of  Engineering  establishes  controls  to  ensure  audit  trails  are  periodi¬ 
cally  reviewed  for  all  ISIS  systems,  including  establishing  an  audit  record  capable 
of  tracing  all  network  activity  and  actions  to  an  individual. 

38.  Workforce  Clearance 

39.  The  ISIS  Center  will  comply  with  the  policies  and  procedures  of  Georgetown 
University  Human  Resources  with  respect  to  background  checks  for  employment 
and  normal  access  to  ISIS  information  assets. 

a.  When  the  requirements  of  a  specific  project  mandate  more  stringent  clearance 
procedures,  the  project  lead  shall  describe  the  necessary  procedures  and  iden¬ 
tify  the  project  members  to  whom  they  should  apply  in  the  “Workforce  Clear¬ 
ance’  section  of  the  Project  IA  Specification  document. 
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b.  For  special  types  of  information  such  as  individually  identifiable  health  in¬ 
formation,  the  project  lead  will  prepare  a  supplement  to  the  ISIS  IA  Policy  de¬ 
scribing  the  conditions  under  which  individual  staff  and/or  collaborators  may 
have  access  to  the  special  information  (i.e.  their  “need-to-know”). 

c.  In  all  cases,  information  stewards  may  impose  restrictions  on  access  to  spe¬ 
cific  types  of  ISIS  information,  including  but  not  limited  to  project  informa¬ 
tion 

d.  All  staff  must  receive  specific  authorization  from  their  supervisor  to  receive 
access  to  the  ISIS  LAN 

e.  Staff  shall  only  obtain  access  to  the  ISIS  LAN  upon  presenting  appropriate  au¬ 
thorization  to  and  receiving  an  account  from  authorized  IA  Officers. 

f.  Standard  and  emergency  ISIS  termination  procedures  shall  include  a  step  re¬ 
questing  the  ISIS  Technical  IA  Officer  to  terminate  access  to  the  ISIS  LAN. 

4 0.  Information  Access  Management 

4 1 .  The  ISIS  Center  manages  information  of  many  different  types  in  its  projects,  in¬ 
cluding  sensitive  information  such  as  individually  identifiable  personal  informa¬ 
tion,  proprietary  information,  research  results,  human  resource  and  financial  in¬ 
formation  about  its  staff,  and  public  information  such  as  published  articles  and 
presentations.  The  ISIS  Center  produces  and  owns  much  of  this  information  but 
also  safeguards  information  from  academic  and  commercial  research  and  devel¬ 
opment  partners. 

a.  Project  leaders  such  as  principle  investigators  and  ISIS  administrators  bear 
primary  responsibility  for  categorizing  information  and  assigning  privileges 
for  information  associated  with  their  projects. 

b.  Project  leaders  shall  grant  their  staff  and  collaborators  access  to  sensitive  ISIS 
information  on  a  “need-to-know”  basis  and  assign  only  those  privileges  neces¬ 
sary  to  accomplish  their  project  work  tasks. 

c.  Project  leaders  shall  maintain  a  list  of  individuals  with  access  to  project  in¬ 
formation  including  their  privileges  in  the  project  archives. 

42.  The  matrix  below  summarizes  common  types  of  information  managed  in  the  ISIS 
Center  with  standard  role-based  privileges  (R=Read,  W= Write,  D=Delete,  and 
A=Administrative).  A  project  director  may  add  or  subtract  privileges  as  war¬ 
ranted  with  appropriate  documentation  to  the  individual  project’s  archives.  Note: 
“Co- investigators”  may  include  collaborators  inside  and  outside  of  the  ISIS  Cen¬ 
ter. 


Information  Type 

Information  Subtyp 

e 

Role 

Privileges 

All 

System  Admin 

R,  W,  D,  A 

Confidential 

Individually  Identifiable 

Principle  Invest 

R,  W,  D,  A 

Project  Manager 

R,  W,  D,  A 

Co-Investigator 

R.  W,  D 

Project  Research  staff 

R,W 

Proprietary 

Principle  Invest 

R,  W,  D,  A 
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Project  Manager 

R,  W,  D,  A 

Co-Investigator 

R,  W,  D 

Research  Data  &  Analy¬ 
sis 

Principle  Invest 

R,  W,  D,  A 

Project  Manager 

R,  W,  D,  A 

Co-Investigator 

R,  W,  D 

Project  Research  staff 

R,W 

Human  Resources 

ISIS  Director 

R,  W,  D,  A 

ISIS  Asst  Direct 

R,  W,  D,  A 

Dir  of  Hum  Res 

R,  W,  D,  A 

Administrative  Staff 

R.  W 

Financial  (ISIS  &  Pro¬ 
ject) 

ISIS  Director 

R,  W,  D,  A 

ISIS  Asst  Direct 

R,  W,  D,  A 

Dir  of  Finance 

R,  W,  D,  A 

Administrative  Staff 

R,  W 

Financial  (Project  Only) 

Principle  Invest 

R,  W,  D,  A 

Project  Manager 

R,  W,  D,  A 

Information  Systems 

Dir  of  Engineering 

R,  W,  D,  A 

Engineering  Staff 

R,  W 

Project 

Principle  Invest 

R.  W,  D,  A 

Project  Manager 

R,  W,  D,  A 

Project  Members 

R,W 

Internal  Use  Only 

Division 

Division  Director 

R,  W,  D,  A 

Division  Manager 

R,  W,  D,  A 

Division  staff 

R,W 

ISIS 

Division  Manager 

R,  W,  D,  A 

ISIS  Staff 

R,  W 

Public 

Steward 

R,  W,D 

ISIS  Staff 

R,  W 

All  others 

R 

43.  Procedures  for  enrolling  and  terminating  access  to  the  ISIS  LAN. 

a.  Project  leaders,  supervisors,  division  directors,  or  the  ISIS  Director  shall  au¬ 
thorize  access  of  ISIS  employees  and  collaborators  to  the  ISIS  LAN  using  the 
“ISIS  LAN  Authorization  Form”. 

b.  ISIS  IA  Officers  shall  create  and/or  modify  accounts  on  the  ISIS  LAN  for 
ISIS  staff  and  collaborators  only  upon  receiving  a  completed  and  signed  copy 
of  the  “ISIS  LAN  Authorization  Form”  from  appropriate  supervisors. 

c.  ISIS  IA  Officers  shall  terminate  access  to  the  ISIS  LAN  upon  receiving 
documented  instructions  from  project  leaders,  division  directors,  supervisors, 
the  ISIS  Director  or  other  authorized  University  official. 

d.  ISIS  IA  Officers  shall  maintain  a  current  list  of  individuals  with  authorized 
access  to  the  ISIS  LAN. 
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44.  Security  Awareness  and  Training 

45.  The  ISIS  Center  will  develop  and  implement  orientation,  annual  refresher  and 
special  role  security  training.  As  well  as  an  ongoing  security  awareness  cam¬ 
paign. 

46.  All  ISIS  faculty  and  staff  will  attend  orientation  and  annual  refresher  information 
security  training  as  well  as  any  special  modules  required  for  their  individual  roles. 

47.  Orientation  training  will  review  key  information  security  topics,  including: 

a.  Network  architecture  and  components 

i.  Basic  structure  and  service  of  infrastructure 

ii.  Technical  security  controls 

b.  Administrative  controls 

i.  Information  access  management 

ii.  Dealing  with  outside  partners 

iii.  Contingency  planning 

iv.  Individual  good  practices  such  as  password  management,  virus  protec¬ 
tion,  media  management 

v.  Implications  of  non-compliance 

c.  Physical  security  controls 

i.  ISIS  facility  controls  (e.g.,  surveillance  cameras,  door  locks) 

ii.  ISIS  workstation  controls  (e.g.,  map  workstations  to  areas  with  differ¬ 
ent  levels  of  access) 

iii.  ISIS  media/device  controls  (e.g.,  managing  disks  and  backup  tapes) 

48.  The  ISIS  Center  will  deploy  security  training  modules  for  individuals  with  spe¬ 
cial  roles,  including: 

a.  HIPAA  privacy  and  security  rules  for  users  of  individually  identifiable  patient 
information 

b.  Policies  to  protect  sensitive  personnel,  financial  and  proprietary  information 
for  administrative  staff 

c.  Security  in  the  R&D  lifecycle  for  information  system  developers 

d.  Obligations  to  protect  ISIS  information  for  departing  staff 

e.  Abridged  version  of  orientation  training  for  outsider  collaborators 

f.  Others  as  necessary 

49.  The  ISIS  center  will  sponsor  regular  attendance  of  IA  Officers  at  appropriate  out¬ 
side  training  courses  in  organizational  and  technical  issues  in  information  secu¬ 
rity. 

50.  The  ISIS  security  awareness  campaign  will  seek  to  promote  understanding  of  the 
fundamental  elements  protecting  the.  confidentiality,  integrity  and  availability  of 
all  ISIS  information  assets  through  monthly  communications  highlighting  a  theme 
with  an  issue,  slogan  and  explanation  using  multiple  delivery  mechanisms. 
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5 1  Security  Incident  Handling  and  Reporting 


52,  The  Georgetown  University  Information  Security  policy  outlines  a  chain  of  secu¬ 
rity  incident  reporting  from  the  level  of  individual  user,  to  manager,  to  local  secu¬ 
rity  personnel,  to  Information  Service  providers,  to  the  University  Information 
Security  Officer. 

a.  All  ISIS  staff  will  comply  with  this  policy  by  initially  reporting  a  security  in¬ 
cident  of  which  they  become  aware  to  their  immediate  supervisor  or  project 
lead. 

b.  The  supervisor  or  project  lead  will  report  the  incident  to  the  ISIS  Technical  IA 
Officer  who  will  forward  it  to  appropriate  University  authorities. 

c.  The  ISIS  Technical  IA  Officer  will  document  the  security  incident  in  the  in¬ 
formation  systems  archive. 

d.  ISIS  staff  will  cooperate  with  authorized  University  officials  in  the  investiga¬ 
tion  of  any  information  security  incident. 

5  3 .  Contingency  Plan 

54,  The  Georgetown  University  Information  Security  Policy  assigns  responsibility  for 
developing  contingency  plans  to  the  Information  Service  Providers  of  individual 
campuses,  schools  or  departments.  Based  on  the  relative  criticality  of  the  integ¬ 
rity  and  availability  of  specific  information  assets,  ISIS  information  stewards  in 
collaboration  with  the  ISIS  Technical  IA  Officer  will  plan,  implement,  routinely 
test  and  revise  specific  measures  to  enable  backups,  emergency  response  and  dis¬ 
aster  recovery  in  the  event  of  damage,  loss,  malfunction  or  failure  of  ISIS  infor¬ 
mation  assets. 


55.  Data  and  application  criticality:  All  ISIS  information  stewards  in  collaboration 
with  the  ISIS  Technical  IA  Officer  shall  develop  an  impact  matrix  that  identifies 
the  integrity  and  availability  requirements  on  scales  of  high,  medium  and  low  for 
each  and  every  information  asset  under  their  care. 


56. 


Backups:  The  Georgetown  University  Information  Security  Policy  requires  estab¬ 
lishing  appropriate  schedules  for  backing  up  servers  and  other  devices  containing 
important  data,  retaining  copies  and  refreshing  media.  The  ISIS  Center  has  estab¬ 
lished  a  protocol  for  backing-up  information  stored  on  central  servers,  including 


Server 

Backup 

Novell  Server 

Arcserve  6.x  Enterprise  Ed  for  Netware 

Email  Server 

Retrospect  6.5  for  windows 

Backup  Server  ISIS  LAN 

Retrospect  6.5  for  Windows 

Web  Applications:  DMZ 
Segment 

Retrospect  6.5  for  Windows 
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b.  Process  and  Schedule  per  Server:  ISIS  operates  a  routine  schedule  for  backups 
on  each  server,  including. 

i.  Novell  Server:  The  server  is  backed  up  using  a  5  day  incremental 
backup  with  full  backup  on  Friday.  It  uses  22  DLT  40/80  tapes  at  2 
tapes  per  week  providing  3  months  of  backup  retention  before  a  tape  is 
overwritten.  Restores  of  random  data  [files  &  folders]  are  performed 
weekly.  User  restores  performed  upon  request.  Typical  restore  esti¬ 
mated  time  is  1  hour  depending  on  the  size  of  the  data  being  restored. 
The  data  backed  up  is  the  shared  drive,  home  directory  and  system  di¬ 
rectory  on  the  server. 

ii.  DMZ  Backup:  The  server  deploys  5  backup  sets  (one  for  each  day)  us¬ 
ing  a  tape  autoloader  that  holds  8  tapes  at  a  time  and  is  configured  with 
a  running  script  to  rotate  the  tapes.  There  are  30  DLT  40/80  tapes  at  5 
tapes  per  week.  Friday  tapes  are  stored  separately  to  provide  6  months 
of  backup  retention  before  the  tape  is  overwritten.  Restores  of  random 
data  [files  &  folders]  are  performed  weekly.  This  backup  system  will 
include  the  email  server.  User  restores  performed  upon  request.  The 
estimated  time  for  a  typical  restore  [retrieval  of  a  few  files]  is  an  hour 
or  less  depending  on  the  size  of  the  data  being  restored.  The  data 
backed  up  is  the  user  email  and  the  email  server  files.  The  system  is¬ 
sues  alerts  and  notifications  and  is  monitored  on  a  daily  basis. 

iii.  Backup  Server  ISIS  LAN:  The  server  is  backed  up  using  2  backup  sets 
scheduled  to  run  on  specific  days  and  times.  The  system  uses  auto¬ 
mated  8  tape  library  drive  DLT  40/80  tapes  providing  6  months  of 
backup  retention  before  a  tape  is  overwritten.  The  estimated  time  of  a 
backup  is  3  hours  depending  on  the  amount  of  data  being  backed  up. 
Restores  of  random  data  [files  &  folders]  are  performed  weekly.  User 
restores  performed  upon  request.  The  estimated  time  for  a  typical  re¬ 
store  [retrieval  of  a  few  files]  is  an  hour  or  less  depending  on  the  size 
of  the  data  being  restored.  There  are  many  computers  in  ISIS  Center 
configured  with  retrospect  client  software  and  are  being  backed  up  on 
a  regular  basis.  ISIS  acquired  the  proactive  option  to  backup  users 
with  laptops  that  are  not  connected  to  the  network  during  regular  back 
up  times 

iv.  Email  Backup:  The  email  server  is  configured  with  a  backup  schedule 
and  has  a  tape  drive  attached  to  it,  backups  run  on  a  daily  basis  and 
data  retention  is  set  for  a  6  months  period. 

57.  All  ISIS  information  stewards  in  collaboration  with  the  ISIS  Technical  I A  Officer 
shall  establish  supplementary  backup  plans  if  necessary  for  meeting  special  needs 
of  data  under  their  care. 

58,  Upon  request,  ISIS  Technical  IA  Officers  also  backup  the  archives  of  individual 
users  or  provide  them  with  backup  devices  and  tapes  for  self-support. 
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59.  Emergency  response:  the  ISIS  Technical  IA  Officer  in  collaboration  with  all  ISIS 
information  stewards  shall  establish  procedures  for  responding  to  emergency  con¬ 
ditions  threatening  information  assets,  including: 

a.  Identifying  and  assuring  physical  access  to  threatened  information  assets  only 
to  authorized  personnel  during  an  emergency; 

b.  Assuring  continuity  of  mission  critical  operations  during  an  emergency  such 
as  preparing  and  testing  alternative  processing  sites  at  varying  degrees  of 
readiness 

60.  Recovery  Plan:  All  ISIS  information  stewards  in  collaboration  with  the  ISIS 
Technical  IA  Officer  shall  establish  recovery  plans  for  information  systems  under 
their  care  based  on  information  asset  recovery  attributes,  including: 

a.  Identity  and  criticality  of  information  asset 

b.  Individuals  responsible  for  recovery 

c.  Source  of  data  for  recovery 

d.  Identity  and  source  of  recovery  software 

e.  Identity  and  source  of  recovery  hardware 

f.  Communication  methods  during  recovery 

g.  Necessary  supplies  for  recovery 

h.  Transportation  methods  for  recovery 

i.  Location  or  space  for  recovery 

j.  Power  and  other  environmental  requirements  for  recovery 

k.  Documentation  for  recovery 

6 1 .  Collaboration  with  partners  outside  the  ISIS  Center 

62.  ISIS  Center  investigators  vitally  depend  upon  initiating,  fostering  and  maintain¬ 
ing  research  and  development  collaborations  with  individuals  and  organizations 
outside  of  the  ISIS  Center.  Mutual  trust  in  safeguarding  shared  sensitive  informa¬ 
tion  of  all  types  constitutes  a  basic  condition  of  successful  partnerships. 

63.  The  ISIS  Center  has  adopted  a  risk-based  approach  to  sharing  particular  types  of 
information  with  examples  appearing  in  the  collaboration  matrix  below.  ISIS  in¬ 
formation  stewards  will  categorize  and  document  the  sharing  risk  for  all  informa¬ 
tion  assets  under  their  care. 


Information 

Type 

Low  Risk 

Medium  Risk 

High  Risk 

Patient  data 

Aggregate 

De-identified 
but  traceable 

Individually 

identifiable 

Research 

data 

Public  domai 

in 

Published  re¬ 
search  data 

Unpublished 
research  data 

Software 

Open  Source 

Proprietary  ex¬ 
ecutable 

Company  or 

ISIS  source 
code 

Hardware 

Low  cost,  mis- 

Low  to  medium 

High  cost  or 
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sion  neutral 

cost,  mission- 
important 

mission-critical 

Information 

System 

Low  cost,  mis¬ 
sion  neutral 

Low  to  medium 
cost,  mission- 
important 

High  cost  or 
mission-critical 

64.  On  behalf  of  individual  projects,  Georgetown  University  shall  negotiate  informa¬ 
tion  asset  sharing  agreements.  AH  agreements  between  ISIS  and  outside  investiga¬ 
tors  shall  list  and  describe  any  types  of  information  expected  to  be  shared  among 
the  collaborating  organizations  as  well  as  the  obligations  of  each  party  to  protect 
the  shared  information  from  breaches  of  confidentiality,  integrity  or  availability. 
For  high  risk  types  of  information,  the  agreements  shall  appear  in  writing,  particu¬ 
larly  for  individually  identifiable  information  including  but  not  limited  to  health 
information.  In  principle,  the  agreements  will  commit  each  party  to  protecting  the 
information  according  to  good  information  security'  standards  and  any  relevant 
laws  such  as  HIPAA  or  the  Federal  Information  Security  Management  Act 
(FISMA).  Written  agreements  shall  appear  as  attachments  to  the  Project  IA 
Specification  document, 

65.  ISIS  Center  shall  honor  and  include  obligations  to  protect  shared  information  de¬ 
riving  from  prime  contracts  either  when  receiving  or  issuing  subcontracts. 


66.  ISIS  Center  will  not  share  confidential  information  outside  the  bounds  of  the  rele¬ 
vant  project  except  when  required  by  University,  regulatory  agency  or  legal  offi¬ 
cials  with  appropriate  authority,  particularly  individually  identifiable  human  sub¬ 
ject  information. 

67 .  ISIS  Center  will  not  share  confidential  administrative  information  except  when 
required  by  University  or  legal  officials  with  appropriate  authority,  including  ISIS 
financial,  human  resource  or  information  security  information. 

68  V.  PHYSICAL  SAFEGUARDS 

69.  ISIS  Facility  Security  Plan 

70.  The  ISIS  Center  is  located  on  2 1 1 5  Wisconsin  Avenue,  NW,  Suite  603,  Washing¬ 
ton,  DC,  a  conventional  office  building.  During  regular  business  hours  the  front 
doors  to  the  office  building  remain  unlocked.  An  electronic  key  system  controls 
access  to  the  building  outside  of  regular  business  hours.  The  ISIS  Center  includes 
four  doors,  of  which  the  main,  front  door  provides  primary  entrance.  The  ISIS 
Center  permits  graded  access  to  facilities  and  equipment  on  a  need-to-know  basis, 
including  public,  restricted  and  authorized  personnel  only  access.  The  matrix  be¬ 
low  summarizes  physical  access  controls  to  types  of  facility  in  support  of  the 
overall  information  access  management  plan: 


Access 


Space 


Control  Mechanism 
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Type 

Public 

Reception 

1  .Receptionist  receives,  documents  in  log 
and  announces  all  visitors  when  available 

2.  Receptionist  receives  all  packages 

3.  Front  door  locked  at  all  other  times 

4.  Employed  ISIS  staff  members  receive 
keys  to  front  door 

Restricted 

Hallways,  Conference 
Room,  Faculty  and 

Staff  Offices ' 

1 .  ISIS  staff  escorts  all  visitors  through 
hallways 

2.  Office  doors  locked  when  unoccupied 

3.  ISIS  staff  members  shall  receive  keys 
to  own  office  door. 

4.  Designated  ISIS  administrators  shall 
receive  master  key 

5.  ISIS  shall  maintain  video  surveillance 
of  hallways 

Authorized 

personnel 

only 

Laboratories,  Com 
puter  Room 

1 .  Laboratory  directors  authorize  and 
document  individual  access  to  laborato¬ 
ries  on  a  need-to-know  basis 

2.  Laboratory  doors  remain  locked  at  all 
times 

3.  Individuals  with  access  privileges  shall 
receive  a  key  or  access  code  depending 
on  the  type  of  lock 

4.  Only  members  of  the  Division  of  En¬ 
gineering  have  authorized  access  to  the 
computer  room. 

5.  Computer  room  remains  locked  at  all 
times. 

6.  Members  of  the  Division  of  Engineer¬ 
ing  shall  receive  a  key  or  access  code  de¬ 
pending  on  the  type  of  lock  on  computer 
room  door. 

7.  Maintain  video  surveillance  of  equip¬ 
ment  of  high  value  or  containing  sensi¬ 
tive  information  when  necessary 

8.  ISIS  Technical  IA  Officer  shall  docu¬ 
ment  all  access  for  repairs  or  mainte¬ 
nance  to  ISIS  facilities  as  well  as  infor¬ 
mation  assets. 

7 1  Information  Equipment  Use  and  Security 


72.  Information  stewards  shall  work  with  the  ISIS  administration  to  follow  correct 
University  procedures  in  purchasing,  maintaining  inventory  and  disposing  of  all 
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information  processing  equipment  including  workstations,  servers,  databases,  and 
media. 


73.  Information  stewards  shall  identify  and  document  the  use  for  any  workstation, 
server,  or  database  that  processes  sensitive  information. 

74.  Servers  and  databases  processing  sensitive  information  shah  not  reside  in  pub- 
licly-accessible  or  high  traffic  areas  such  as  the  ISIS  reception,  hallway,  or  con¬ 
ference  room. 

75.  When  possible  avoid  placing  workstations  processing  sensitive  information  in 
publicly-accessible  or  high  traffic  areas  such  as  the  ISIS  reception,  hallway,  or 
conference  room. 

76.  For  workstations  that  process  sensitive  administrative  information  and  reside  in 
publicly-accessible  areas,  implement  administrative,  physical  and  technical  con¬ 
trols  minimizing  the  risk  of  deliberate  or  accidental  access  to  the  information, 
such  as  sound  training  of  workstation  users,  monitor  screens,  locks,  remote  data 
archiving  and  automatic  logoff.  Label  all  such  workstations  as  “Not  for  Public 
Use.”  If  necessary,  provide  clearly  labeled  machines  for  public  use  in  publicly- 
accessible  areas. 

77.  Workstations,  servers  and  databases  processing  sensitive  information  shall  reside 
in  areas  protected  from  damage  by  water,  heat  or  other  environmental  hazards. 

78.  Information  stewards  shall  work  with  ISIS  administration  to  document  and  assign 
accountability  for  the  movement  of  information  equipment  containing  sensitive 
information  into  and  out  of  the  ISIS  Center,  including  proper  receipt  of  new 
equipment,  temporary  and  permanent  transfer  of  equipment  outside  of  ISIS,  data 
removal  and  final  physical  disposal. 

79.  The  IA  Technical  Officer  in  collaboration  with  information  stewards  and  users 
shall  identify,  implement  and  document  procedures  for  properly  marking,  storing, 
cleansing  before  reuse  or  disposal  IAW  industry  standards,  and  final  disposing  of 
electronic  media  containing  sensitive  information. 

80.  The  I A  Technical  Officer  shall  periodically  review  documentation  of  physical  se¬ 
curity  management,  including  the  visitors’  log,  records  documenting  movement  of 
information  equipment  and  media  into  and  out  of  ISIS,  and  media  disposal  to  as¬ 
sure  compliance  with  established  procedures  and  identify  possible  breaches. 

81.  VI.  TECHNICAL  SAFEGUARDS 

82.  The  ISIS  Center  has  consistently  reviewed  and  upgraded  the  sophistication  of  its 
technical  information  security  safeguards  while  expanding  its  mission  and  in¬ 
creasing  the  sensitivity  of  its  projects.  When  initially  founded,  the  ISIS  Center 
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conducted  research  and  development  on  information  systems  without  using  any 
patient,  proprietary  or  other  sensitive  information.  During  this  era,  ISIS  main¬ 
tained  no  perimeter  defenses  and  implemented  basic  security  controls  such  as 
username  and  password  identification  and  authentication  schemes.  Individual  re¬ 
searchers  bore  the  entire  responsibility  for  the  security  of  their  information  re¬ 
sources.  Upon  launching  pre-clinical  trials  of  computer-aided  diagnosis  and 
telemedicine  using  patient  information  in  various  forms,  the  ISIS  Center  began 
developing  centralized  approaches  to  information  security  based  primarily  upon 
technical  controls,  including  its  initial  effort  at  perimeter  defense,  a  single  inter¬ 
face  firewall  that  isolated  the  ISIS  LAN  from  the  Georgetown  University  LAN 
and,  later,  Virtual  Private  Networks  (VPNs)  to  provide  secure  remote  access  for 
transmitting  sensitive  data.  Having  expanded  the  range  of  its  projects  to  include  a 
variety  of  types  of  sensitive  information,  the  ISIS  Center,  again,  is  upgrading  its 
security  architecture  to  include  six  interfaces  that  create  network  segments  with 
increasingly  stringent  access  and  transmission  security  controls.  Although  project 
and  divisional  information  stewards  retain  important  roles  in  the  ISIS  information 
assurance  program  as  outlined  in  the  preceding  sections  of  this  policy,  their  work 
depends  and  builds  upon  a  centrally  planned,  implemented  and  evaluated  organ¬ 
izational  and  technical  security  plan  that  seeks  to  protect  ISIS  information  assets 
as  well  as  demonstrate  compliance  with  regulatory  requirements  such  as  HIPAA, 
FISMA  and  the  IA  policies  of  its  academic,  commercial  and  government  partners. 

83.  The  ISIS  Security  Architecture 

84.  The  following  graphic  illustrates  the  distribution  of  ISIS’s  flrewalled  segments: 
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Interface  Descriptions 


Each  interface  manifests  specific  characteristics  and  performs  specific  purposes, 
including: 


a.  Segment  1:  High  Security  segment.  (Security  Level  100) 

This  segment  bears  the  most  sensitive  ISIS  information  with  the  highest  protec¬ 
tion  requirements  and,  thus,  requires  the  most  stringent  access  control  rules.  Spe¬ 
cific  rules  are  configured  detailing  which  hosts  are  allowed  access  to  specific  ser¬ 
vices  residing  on  this  segment.  Four  SQL  servers  and  one  Oracle  server  exist  on 
this  subnet.  Identified  users  with  proper  privileges  in  the  DMZ,  ISIS  and  VPN 
subnet  will  access  one  or  more  nodes  on  the  inside  interface,  including  the 
eHealth  and  Biodefense  groups  both  of  which  manage  individually  identifiable 
data  in  their  research. 

b.  Segment  2:  ISIS-VPN  Router  segment  (Security  Level  90) 

This  segment  provides  secure,  remote  access  to,  and  transmission  of  certain  bod¬ 
ies  of  sensitive  information,  including  individually  identifiable  information.  Ac¬ 
cess  to  this  segment  is  limited  to  remote  users  with  proper  privileges  and  client 
software  configuration, 

c.  Segment  3:  VLAN  77.  ISIS  user  segment.  (Security  level  80) 

95%  of  the  ISIS  users  are  currently  on  VLAN77.  This  VLAN  supports  approxi¬ 
mately  50  workstations,  a  Novell  Server  and  multiple  printers. 

d.  Segment  4:  VLAN  544.  The  ISIS  DMZ  segment  (Security  Level  80) 
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The  DMZ  segment  contains  all  hosts  providing  public  services  to  users  on  the 
outside  of  the  firewall, 
e.  Segment  5 :  Prototype  Segment. 

This  is  a  test  segment,  which  does  not  contain  sensitive  data.  ISIS  will  configure 
rules  to  provide  access  to  workstations  in  this  segment  to  specific  hosts  horn  the 
outside  and  other  segments  served  by  the  firewall.  F.  The  outside  Interface  (Secu¬ 
rity  Level  0): 

This  interface  functions  as  the  outside  interface  for  the  firewall  with  a  security 
level  of  0. 

Wireless  Access  point.  This  wireless  access  point  is  in  the  non-  pro¬ 
tected  segment  allowing  access  to  the  Internet  and  web  resources  to  ISIS 
visitors  and  users  roaming  around  the  office.  Devices  on  the  wireless 
network  are  considered  outsiders  and  have  no  access  to  other  segments 
with  higher  security  levels  unless  if  used  with  VPN  clients  with  proper 
configuration  and  credentials 

g.  IPX  traffic  IPX  (Novel)  traffic  bi -passes  the  FW  and  goes  directly  to  2115- 
RTR1 .  This  server  is  part  of  the  NDS  replica  ring  and  the  Georgetown  tree;  it  is 
intended  to  stop  the  usage  of  Novel  server  and  services. 

86.  Auditing 

87.  The  ISIS  Center  is  actively  monitoring  logs  and  access  to  the  network.  We  are 
using  a  CISCO  ACS  server  to  authenticate  remote  users  accessing  the  network 
with  VPN  clients.  The  ACS  server  provides  authentication,  authorization,  and  ac¬ 
counting  (AAA)  of  user  sessions  to  an  AAA  server.  The  server  checks  who  can 
log  into  the  network  from  wired  or  wireless  connections  and  what  privileges  each 
user  has  in  the  network.  We  maintain  one  year  login  information  that  includes  at¬ 
tempted  and  failed  logins  and  successful  logins.  The  logs  also  show  user  names, 
date  and  time  of  login  and  the  originating  IP  address  of  the  machine  they  are  us¬ 
ing  to  access  the  network. 

88.  Microsoft  Active  Directory:  We  will  monitor  and  log  AD  once  fully  migrated. 

89.  Firewall  monitoring:  We  deployed  a  Cisco  Syslog  server.  The  Syslog  server  is 
active  and  collects  log  messages  from  the  PIX  Firewall.  The  firewall  constantly 
sends  messages  to  Syslog  server  to  document  the  following  events: 

vi.  Security:  dropped  packets 

vii.  Resources  monitoring 

viii.  System:  console  logins/  logouts  and  firewall  reboots 

ix.  Accounting:  bytes  transferred  per  connection 

One  year  of  logs  is  stored  to  the  Syslog.  The  PIX  Firewall  provides  seven  differ¬ 
ent  logging  levels:  Emergencies,  Alerts,  Critical,  Errors,  Warnings,  Notifications, 
Informational  and  Debugging. 

Syslog  is  monitored  on  a  daily  basis  for  suspicious  activities.  Special  attention  is 
paid  to  Emergencies,  Alerts  and  Warnings. 
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90.  Auditing  shared  resources:  for  information  systems  shared  between  ISIS  investi¬ 
gators  and  outside  collaborators,  the  MOA  will  include  requirements  about  who 
will  monitor,  document  and  review  system  events. 

91.  Authentication 

92.  The  ISIS  Center  requires  username  and  password  for  identification  and  authenti¬ 
cation  into  the  ISIS  LAN,  the  VPN  and  information  systems  using  the  Active  Di¬ 
rectory  authentication  system. 

93.  ISIS  users  shall  implement  safe  password  practices,  including: 

a.  When  creating  passwords,  use 

i.  Length  of  eight  or  more  characters 

ii.  Combination  of  letters  (upper  and  lower  case),  numbers,  and  special 
characters 

iii.  Include  at  least  one  of  each  character  type. 

b.  Change  the  password  every  90  days. 

c.  Do  not  share  their  passwords 

d.  Contact  the  Technical  IA  Officer  when  suspecting  their  password  has  been 
compromised. 

94.  Integrity 

95.  The  ISIS  center  maintains  up-to-date  subscriptions  to  antivirus  software,  loads  it 

into  new  workstations,  and  regularly  reminds  users  to  download  updates,  particu¬ 
larly  during  virus  scares.  The  email  server  automatically  scans  messages  for  virus 
detection  and  deletes  infected  files. 

96.  The  ISIS  Center  provides  integrity  checks  for  transmissions  using  the  VPN  net¬ 
work. 

97.  The  ISIS  Center  is  investigating  implementation  of  an  intrusion  detection  system 
as  part  of  the  upgrade  of  its  perimeter  defense 

98.  Encryption 

99.  The  ISIS  Center  provides  encryption  for  incoming  transmissions  using  the  VPN 

network  for  designated  users. 

100.  ISIS  users  shall  transmit  confidential  information  over  the  Internet  only  using  the 
VPN  network.  ISIS  Center  works  with  individual  users  to  enable  encryption  of 
confidential  outgoing  transmissions  when  requested. 
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Minutes  from  Advisory  Board  Conference  Call 
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Sacred  Breath  (aka  Medical  Vanguard  Diabetes  Management) 
Advisory  Board  Conference  Call 


Date:  February  3,  2006 

Advisory  Board  Members  Present:  Chairperson*  Marjorie  Mau,  Michael  Ackerman,  Nicole  Johnson- 
Baker,  Bette  Keltner,  John  Scott 

Advisory  Board  Members  Not  Present:  Tex  Hall,  Chris  Macedonia,  Michelle  Magee,  Sam  McCraken, 
Buford  Rolin,  Paul  Tibbets,  Lorraine  Valdez 
Georgetown  Personnel:  Betty  Levine,  Pam  Angelus 
Others:  Carrie  Gould-Kabler 

1.  Introduction 

•  Betty'  Levine  thanked  everyone  for  participating  in  the  conference  call  and  outlined  the  agenda  for 
the  meeting, 

•  Dr,  Mau  asked  that  minutes  of  the  meeting  be  taken  and  circulated  to  all  Board  members. 

2,  Status  Update  -  given  by  Pam  Angelus  for  each  of  the  six  study  sites 

•  Poarch  Band  of  Creek  Indians  Atmore,  Alabama 

1 .  March  2005  -  all  IRB  approvals  completed 

2.  October  2005  first  patient  enrolled 

3.  Personnel  issues  delayed  start  of  study  -  PI  resigned,  tribe  unsuccessful  at  hiring  a  desig¬ 
nated  study  coordinator.  Diabetes  clinic  case  manager  is  currently  working  half-time  as 
study  coordinator, 

4.  20  patients  presently  enrolled,  IRB  approved  for  50  patients 

5.  Recently  problems  arose  with  defective  glucose  meter  cables.  ISIS  Center  working  with 
manufacturer  and  study  nurse  to  resolve  the  issue.  Patients  arc  continuing  to  collect  and 
transmit  data  despite  the  problems. 

•  Mamlan,  Hidatsa  and  Arikara  (MHA)  Nation  -  New  Town,  North  Dakota 

1 .  June  2005  -  all  IRB  approvals  completed 

2.  September  2005  -  first  patient  enrolled 

3.  10  patients  enrolled  through  December  2005,  5  of  whom  did  not  meet  inclusion  criteria. 
Of  the  5  remaining  patients,  2  have  requested  to  be  dropped  from  the  study.  IRB  ap¬ 
proved  for  50  patients, 

4.  Limited  number  of  patients  enrolled  because  the  coordinator's  access  to  patient  records  is 
restricted  by  H1PAA  regulations.  Coordinator  must  rely  on  clinic  personnel  to  identify 
appropriate  patients  for  enrollment.  Also,  study  coordinator  has  limited  knowledge  about 
diabetes  and  conducting  research  projects, 

5.  December  2005  -  the  MHA  clinics  changed  glucose  meters  and  the  new  meters  were  in¬ 
compatible  with  the  modems  being  used  for  the  study.  Presently,  modems  that  are  com¬ 
patible  with  the  new  meters  are  available,  however,  the  same  cables,  used  by  the  Poarch 
Band  of  Creek  Indian's  clinic,  are  also  used  with  this  new  meter.  Patients  have  been  noti¬ 
fied  that  the  study  and  the  study  coordinator  are  temporarily  on  hold  until  the  equipment 
problems  are  resolved  by  the  glucose  meter  manufacturer. 

•  Nez  Perce  Tribe  -  Lapwai,  Idaho 

1 .  June  2005  -  received  local  IRB  approval,  currently  waiting  for  Army  IRB  approval  (com¬ 
plete  application  submitted  1-17-06). 

2.  January  2006  -  study  coordinators  ( L5  FTE)  completed  training  at  the  ISIS  Center. 

3.  IRB  approved  for  40  patients 
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4.  Modems  and  meters  have  been  thoroughly  tested  and  no  problems  are  anticipated. 

•  Tlingit  and  Haida  Tribes  of  Alaska  —  Juneau,  Alaska 

1.  August  2005  -  received  local  IRB  approval,  currently  waiting  for  Army  1RB  approval 
(complete  application  submitted  1-19-06). 

2.  Project  administered  through  South  East  Alaska  Regional  Health  Consortium  (SEARHC) 
Juneau  Medical  Center  which  provides  outpatient  services  for  these  two  tribes. 

3.  November  2005  -  study  coordinator  (clinic’s  diabetes  educator)  completed  training  at  the 
ISIS  Center. 

4.  IRB  approved  for  50  patients 

5.  Modems  and  meters  have  been  thoroughly  tested  and  no  problems  are  anticipated. 

•  Native  Hawaiians  -  Na  Pu'uwai  -  Kaunakakai.  HI  and  Ke  Ola  Mamo  -  Honolulu.  HI 

1 .  December  2005  -  received  local  IRB  approval,  currently  waiting  for  Army  IRB  approval 
(complete  application  submitted  1-25-06). 

2.  Project  administered  through  Papa  Ola  Lokahi  -  Honolulu,  HI 

3.  Per  their  request,  study  personnel  will  be  trained  by  the  ISIS  Center  in  Hawaii. 

4.  IRB  approved  for  a  total  of  30  patients 

5.  Modems  and  meters  have  been  thoroughly  tested  and  no  problems  are  anticipated. 

6.  Modifications  to  the  MyCareTeam  site  are  underway  at  the  request  of  the  project  team. 
The  modifications  will  make  the  site  more  culturally  appropriate  for  the  Native  Hawaiian 
population. 

•  National  Naval  Medical  Center  -  Bethesda,  Maryland 

1 .  January  2005  -  all  IRB  approvals  complete 

2.  February  2005  —  first  patient  enrolled 

3.  All  study  participants  are  pregnant  women  with  either  type  1,  type  2  or  gestational  diabe¬ 
tes  followed  at  NNMC, 

4.  Project  issues  -  PI  deployed  to  Iraq  soon  after  enrollment  started.  NNMC  is  a  teaching 
hospital  where  patients  primarily  interact  and  are  seen  by  residents  in  training.  Conse¬ 
quently  we  have  not  had  as  much  cooperation  from  the  clinical  providers  as  we  would 
have  liked. 

5.  17  patients  currently  enrolled,  IRB  approved  for  40  patients. 

6.  No  equipment  problems  have  occurred  and  none  anticipated. 

3.  Sustainability 

•  Betty  Levine  updated  the  board  members  about  the  current  status  of  the  commercialization  effort. 
The  company  commercializing  the  MyCareTeam  application  has  agreed  to  offer  the  service  to 
any  participating  community  at  a  reduced  cost  when  the  Sacred  Breath  project  ends. 

•  Since  the  communities  involved  initially  asked  Georgetown  personnel  about  their  own  ability'  to 
continue  the  use  of  the  technology,  assuming  it  proved  successful,  after  the  completion  of  the 
study,  GU  personnel  would  like  the  Advisory  Board  to  provide  guidance  on  how  this  might  be 
accomplished. 

•  Bette  Keltner  provided  some  insight  noting: 

1 .  Vehicles  for  funding  this  type  of  technology  or  clinical  tool  are  different  for  each  com¬ 
munity 

2.  Funding  may  rely  on  3rd  party  payment  dominated  by  federal  funds 

3.  This  may  differ  depending  on  whether  tribes  are  compacted  or  contracted 


W8 1 XW1 1-04-2-0002 


•  Marjorie  Mau  stated  that  the  sites  may  not  have  used  the  software  long  enough  to  be  able  to  de¬ 
termine  its  success,  therefore  a  discussion  of  sustainability  may  be  premature.  Also,  the  follow¬ 
ing  items  need  to  be  considered: 

■  Technical  aspect,  technical  support,  problems  with  equipment  may  skew  how  the 
sites  and  patients  responded  to  the  technology 

■  Where  the  data  is  stored  may  also  be  a  concern  to  some  sites,  limiting  their  will¬ 
ingness  to  use  this  technology  as  a  clinical  tool 

■  John  Scott  noted  that  these  types  of  technology  are  the  wave  of  the  future  and  the  experience  of 
having  done  this  might  be  considered  a  good  outcome  by  itself  for  the  different  sites, 

4.  Next  Meeting 

•  We  proposed  holding  the  next  Advisory  Board  meeting  around  the  American  Diabetes  Associa¬ 
tion  Annual  Meeting  June  9-13  in  Washington,  DC 

•  Nicole  Johnson- Baker  mentioned  that  June  9th  might  be  the  best  day  since  the  ADA  may  not  open 
the  meetings  on  this  day  to  everyone.  And  thus  there  may  be  less  conflict  with  scientific  sessions 

•  At  Marjorie  Mau’s  suggestion,  questions  will  be  circulated  to  the  advisory  board  members  prior 
to  the  next  meeting  so  that  some  thought  can  be  given  to  them  prior  to  the  meeting. 

•  Members  from  each  site  may  be  invited  to  present  their  experiences  to  the  board 
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Minutes  from  2nd  Sacred  Breath  Advisory  Board  Meeting 
June  9,  2006  -  Washington,  DC 

In  attendance: 

Advisory  Board  members:  Marjorie  Mau,  Michael  Ackerman,  Bette  Keltner,  Nicole  Johnson- 
Baker,  Mark  Carrol  (for  Lorraine  Valdez) 

ISIS  members:  Betty  Levine,  Pam  Angelus,  Seong  K.  Mun,  Mary  Lou  Ingeholm,  Ming-Jye  Hu, 

Maggie  Fang,  Inyoung  Choi,  Mihai  Dorobantu,  Cherrel  Christian 

Sacred  Breath  Site  Reps:  Donna  Johnson,  Jaci  McCormack 

Department  of  Defense  Rep:  Robert  Read 

MyCareTeam,  Inc.  Rep:  James  Mingle 

Georgetown  University  Rep:  Scott  Fleming 

Opening  Remarks 

Opening  Remarks  were  made  by  Seong  K.  Mun.  He  discussed  how  the  ISIS  Center  has  been 
involved  in  Diabetes  and  technology  for  a  number  of  years.  He  talked  about  how  the  A1 C  value 
is  a  great  surrogate  marker  for  determining  outcomes  in  diabetes  research  making  for  scientifi¬ 
cally  valid  experiments.  Congressional  funding  started  the  Medical  Vanguard  Diabetes  Man¬ 
agement  Project,  aka  Sacred  Breath,  and  is  managed  by  the  US  Army.  He  mentioned  that 
there  are  peer  reviewed  published  articles  that  validate  our  technology.  Dr.  Mun  mentioned  that 
we  are  seeking  guidance  from  the  Advisory  Board  as  to  how  resources  and  efforts  should  be 
prioritized  so  that  we  can  be  most  helpful  to  the  diabetes  community. 

Agenda  Review 

Dr.  Mau  went  over  the  agenda  (See  Below)  and  expressed  that  she  was  excited  to  hear  how  the 
sites  were  progressing.  She  expressed  how  working  in  these  communities  is  a  unique  process, 
how  each  community  needs  to  work  through  things  with  their  own  processes  and  on  their  own 
time. 

Status  Report 

Next  Betty  Levine  gave  a  status  report  for  the  entire  project.  The  Aims  of  the  original  proposal 
are: 

1 .  Improve  the  effectiveness  of  diabetes  management  for  gestational  diabetes  patients 
and  adult  patients  in  Native  American  communities 

2.  Study  an  effective  process  for  inserting  diabetes  management  technology  into  exist¬ 
ing  clinical  programs  in  diverse  communities 

3.  Not  focused  solely  on  clinical  outcomes  -  more  on  acceptance  of  the  technology  and 
its  adaptability  to  different  cultures 

She  explained  how  this  project  is  more  about  identifying  if  technology  that  was  proven  success¬ 
ful  in  managing  diabetes  with  other  groups  could  be  adapted  for  and  applied  to  these  communi¬ 
ties  with  similar  success.  Therefore  the  project  is  not  solely  a  clinical  outcomes  study  but  also  a 
study  in  process  insertion. 

The  initial  eight  participant  communities  included: 

Mandan,  Hidatsa  &  Arikara  Nation  -  Three  Affiliated  Tribes,  New  Town,  North  Dakota 

Poarch  Band  of  Creek  Indians,  Atmore,  Alabama 

Nez  Perce  Nation,  Lapawai,  Idaho 

Chilkoot  Indian  Tribe,  Haines,  Alaska 

Rosebud  Sioux,  Rosebud,  South  Dakota 
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Mescalero,  Mescalero,  New  Mexico 
Wampanoag,  Aguinnah,  Massachusetts 
Papa  Ola  Lokahi,  Honolulu  Hawaii 
National  Nava!  Medical  Center,  Bethesda,  MD 

The  Chilkoot  declined  to  participate  and  the  Tlingit  and  Haida  Tribes  of  Juneau  Alaska  were 
substituted  in  their  piace.  The  Wampanoag,  Rosebud  Sioux  and  Mescalero  also  declined  to 
participate  but  no  other  tribes  were  substituted.  By  that  time,  we  realized  that  it  was  going  to  be 
more  difficult  than  expected  getting  through  IRB  approvals  and  getting  the  projects  started  so 
we  chose  to  concentrate  on  the  committed  sites  instead. 

The  Georgetown  Team  consists  of  Seong  K.  Mun,  director  of  the  ISIS  Center  and  Principal  In¬ 
vestigator  for  the  project,  Betty  Levine  -  Division  Head  for  eHealth  and  Telemedicine  and  over¬ 
all  project  manager,  Pam  Angelus  -  compliance  officer  and  project  coordinator,  Ming-Jye  Hu, 
Maggie  Fang,  Mihai  Dorobantu  software  developers,  Inyoung  Choi  in  charge  of  the  evaluation 
piece  of  the  project  and  consultants  like  Jim  Grigsby  who  also  provide  assistance  with  the 
evaluation  piece. 

The  biggest  challenges  faced  by  GU  personnel  so  far  include: 

-  Commitment  from  clinical  personnel  at  the  sites 

o  Study  nurse  would  be  involved,  but  difficulty  getting  physician  to  work  with  the 
nurse  or  the  tech 

o  How  does  one  get  the  clinical  personnel  involved  and  interested  enough  to 
use  the  site  with  their  patients? 

o  It  is  difficult  to  get  them  to  understand  why  this  could  be  better  for  their  pa¬ 
tients 
Recruitment 

o  So  far,  recruitment  has  been  much  more  difficult  than  anticipated, 
o  How  does  one  recruit  from  groups  that  may  not  feel  comfortable  with  or  may 
not  have  participated  in  many  research  studies 
Orienting  study  coordinators  to  research  process 

o  It  is  difficult  to  get  the  study  coordinators  to  understand  the  IRB  process  and 
that  once  the  protocol  has  gone  through  IRB  process  why  everything  needs 
to  be  followed  exactly  as  laid  out  in  the  protocol 
Distance 

o  Initially  GU  personnel  traveled  to  all  sites  and  worked  closely  with  study  per¬ 
sonnel  to  setup  the  project 

o  Cost  of  travel  and  time  was  always  in  the  back  of  their  minds  so  they  did  not 
make  as  many  trips  as  they  probably  should  have 
o  In  hindsight,  being  more  visible  at  the  sites  might  have  helped  to  encourage 
the  sites  and  work  through  some  of  the  issues  more  quickly 

The  project  Schedule  is: 

-  Project  began  September  2003 

-  No-cost  extension  received  September  2005 

-  Project  scheduled  to  end  September  2006 

Request  to  continue  until  September  2007  was  submitted 
Additional  funding  requests  will  be  made  to  congressional  supporters 

-  Discussions  are  beginning  with  each  site  to  determine  their  level  of  interest  in  con¬ 
tinuing  with  the  project 
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The  future  efforts  of  the  GU  group  working  on  Sacred  Breath  are  to  design  a  module  that  man- 
ages  hypertension  as  well  as  the  diabetes  module  has  worked.  Also,  they  will  continue  to  keep 
the  site  fresh,  adding  new  content  and  new  features  as  the  needs  arise  or  the  features  are  iden¬ 
tified.  Lastly,  Betty  Levine  explained  that  GU  has  entered  into  a  commercial  licensing  agree¬ 
ment  with  MyCareTeam,  Inc  that  is  new  for  ISIS  and  could  be  a  mechanism  to  allow  those  sites 
that  find  the  technology  useful  in  managing  their  patient  to  continue  to  use  it  at  a  low  cost  after 
project  funding  has  ended. 

Site  Descriptions 

National  Naval  Medical  Center  (NNMC)  -  Cherrel  Christian 

Next  Cherrel  Christian  gave  an  update  on  what  is  happening  with  the  pregnancy  and  diabetes 
group  at  the  National  Naval  Medical  Center.  Cherrel  was  initially  brought  in  as  an  expert  in  dia¬ 
betes;  she  is  a  certified  diabetes  educator. 

Recruitment  Efforts: 

The  project  began  at  NNMC  in  February  2005  and  at  the  time  of  the  meeting  25  women  had 
been  consented  and  followed  in  the  program.  The  goal  is  to  get  40  women  involved.  These 
women  either  have  gestational  diabetes  or  are  pregnant  but  also  have  preexisting  type  1  or  type 
2  diabetes.  Of  the  25  women  consented,  two  delivered  their  babies  before  sending  in  data  and 
one  withdrew.  Four  are  currently  active  and  19  completed  the  study. 

The  recruitment  efforts  included  presentations  to  house  staff  and  nurses  before  and  after  the 
study  began;  the  gestational  diabetes  classes  held  each  week  for  newly  diagnosed  women,  and 
through  study  brochures  distributed  throughout  the  complicated  OB  and  Gestational  Diabetes 
clinics. 

Project  Team: 

The  team  at  the  NNMC  consists  of  Dr.  Sabi  -  principal  investigator,  2  attending  physicians,  the 
Complicated  OB  and  Gestational  Diabetes  residents,  2  nurses,  a  registered  dietitian,  and  Cher¬ 
rel  -  diabetes  educator  and  study  coordinator. 

What  was  Easy: 

The  easy  parts  for  the  NNMC  group  has  been  identifying  patients  who  fit  the  study  criteria; 
working  with  the  staff  although  they  were  concerned  with  increased  workload;  the  high  level  of 
technical  knowledge  of  participants  and  physicians;  most  individuals  in  the  Armed  services  are 
comfortable  communicating  online  because  email  is  used  to  communicate  with  deployed  col¬ 
leagues,  family  members,  and  others. 

What  was  difficult: 

One  of  the  biggest  challenges  faced  at  NNMC  was  staff  turnover.  Because  NNMC  is  a  military 
installation,  people  get  deployed  even  our  Principal  Investigator  got  deployed.  There  was  al¬ 
ways  someone  identified  to  take  over,  but  it  usually  meant  bringing  their  own  ideas  and  ways  of 
doing  things  to  the  project.  The  gestational  diabetes  clinic  had  just  started  when  Sacred  Breath 
was  beginning  which  meant  that  we  should  have  a  larger  pool  of  possible  participants. 

All  military  personnel  and  dependents  living  in  the  greater  DC  area  who  are  pregnant  and  have 
diabetes  get  OB  care  at  NNMC  regardless  of  the  distance  they  have  to  travel.  GDM  classes 
were  held  at  NNMC  which  also  provided  a  pool  of  participants  to  recruit  from. 

The  challenges  include  the  war  in  Iraq  —  Dr.  Macedonia,  the  initial  PI  was  deployed,  the  in¬ 
crease  workload  of  all  staff  not  deployed  during  times  of  deployment,  getting  the  medical  staff  to 
communicate  directly  with  patients  via  the  system  since  they  are  used  to  calling  the  patient,  or 
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waiting  until  the  next  clinic  visit  to  discuss  issues  with  the  patient.  Insulin  pumps  are  becoming 
more  common  among  women  seen  at  the  complicated  OB  clinic  at  NNMC.  Initially  the  provid¬ 
ers  did  not  want  to  include  these  patients  in  the  study  -  however  as  the  project  progressed  they 
saw  this  as  a  missed  opportunity  and  now  want  to  include  them.  We  have  many  challenges  im¬ 
plementing  the  insulin  pump  screens  in  a  way  that  is  useful  for  the  NNM  personnel.  There  are  a 
lot  of  adjustments  with  insulin  pumps  that  need  to  be  captured,  making  the  user  interface 
screens  user  friendly  has  been  a  challenge.  Also,  NNMC  staff  was  also  concerned  that  this  pro¬ 
ject  would  lead  to  double  charting  (having  to  keep  a  paper  chart  and  an  online  record).  We 
adapted  the  site  such  that  information  was  printed  on  NNMC  approved  forms  that  could  be  in¬ 
serted  into  the  patients  paper  chart. 

NNMC  personnel  have  seen  an  improvement  in  adherence  by  the  participants.  One  woman 
who  would  never  right  down  her  blood  sugars  in  table  form  (had  a  learning  disability)  found  that 
when  using  the  system,  her  husband  could  help  her  upload  the  data  and  the  care  providers  got 
far  more  information  from  her  that  was  used  to  keep  her  sugars  under  better  control. 

Adjustments  to  the  Site: 

One  adjustment  to  the  application  that  was  made  specifically  for  this  population  was  to  allow  the 
participants  to  directly  connect  their  glucose  meter  to  their  computer  and  transfer  their  blood 
sugar  readings  directly.  Many  of  the  participants  do  not  have  land-line  phones  and  therefore  the 
modem  technology  we  were  using  to  transfer  the  data  from  the  glucose  meter  to  the  database 
would  not  work.  Since  this  population  has  a  high  level  of  technical  knowledge,  this  did  not  lead 
to  any  problems. 

Technical  or  equipment  problems: 

None 

Incentives: 

None 

In  Summary: 

Another  benefit  seen  by  the  program  was  that  it  reduced  the  number  of  times  patients  had  to 
come  to  the  clinic  and  allowed  the  nurse  to  more  readily  get  the  patients  blood  sugar  readings 
without  having  to  track  the  patient  down  by  phone  and  write  up  the  individual  readings. 


Questions  and  comments  posed  to  Cherrel: 

1 .  Cherrel  was  asked  how  many  patients  were  approached  to  participate. 

a.  About  150  potential  participants  were  approached  and  26  had  enrolled. 

2.  Did  participating  program  help  make  the  long  distances  easier? 

a.  It  was  helpful  —  instead  of  having  to  talk  to  Susan  they  could  send  them  in  more 
quickly.  Instead  the  mom  comes  every  week  they  could  come  once  every  2  or  3 
weeks 

3.  We  were  asked  to  describe  the  surveys. 

a.  All  participants  were  surveyed  twice  while  they  were  enrolled  in  the  study;  once 
2-4  weeks  after  enrollment  and  then  again  right  before  they  delivered  their  ba¬ 
bies.  Twenty  statements  on  the  survey  are  about: 

i.  the  use  of  the  website 

ii.  whether  they  learn  from  the  information  on  the  site 

iii.  how  they  like  communicating  using  the  website 

iv.  which  features  they  use  most  often 
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v.  demographic  information:  education,  where  they  use  website  (home, 
school,  community  center),  what  else  they  use  the  internet  for 

4.  Cherrel  described  the  split  in  the  diabetes  world  between  endocrinologists  and  obstetri¬ 
cians,  often  women  in  a  pregnancy  clinic  are  seen  by  these  providers  for  the  first  time 

5,  It  was  pointed  out  that  the  study  is  a  bit  disjointed  at  NNMC  because  the  residents  are 
on  the  complicated  OB  and  gestational  diabetes  rotations  for  6-8  weeks  -  so  we  are 
constantly  training  new  residents  in  the  use  of  the  system.  The  nurses  are  the  ones  that 
use  the  system  most  frequently  and  it  is  left  to  them  to  prod  the  residents  to  use  the  sys¬ 
tem 

Poarch  Band  of  Creek  Indians  (PBCI)  -  Donna  Johnson 

Recruitment  efforts: 

Donna  Johnson,  the  study  nurse  for  the  PBCI  project  presented  the  status  of  their  project.  En¬ 
rollment  began  in  October  2005  and  they  currently  have  20  patients  enrolled  into  the  study. 

They  were  hoping  to  enroll  50. 

Patients  were  recruited  by  reviewing  their  diabetes  registry  and  identifying  those  that  fit  the  crite¬ 
ria.  These  patients  were  contacted  and  the  study  explained  to  them.  Those  that  agreed  to  par¬ 
ticipate  met  one-on-one  with  Donna  to  be  trained  in  using  the  system.  This  was  a  stressful 
process  for  Donna  because  of  the  turnover  in  staffing  during  this  time  -  the  ioss  of  their  clinic 
director  and  the  physician. 

Project  Team: 

Their  team  consists  of  Donna,  the  study  nurse,  who  recruits,  enrolls  and  follows  all  the  patients 
in  the  study,  a  technical  support  person,  and  their  clinic  director.  They  have  been  trying  to  get 
their  physician  and  nurse  practitioner  involved  but  they  are  new  and  it  has  not  been  easy. 

What  was  Easy: 

There  was  not  much  that  was  very  easy  for  PBCI  initially.  Technical  support  at  the  ISIS  Center 
was  always  available  to  them  and  the  well  written  protocol  allowed  them  to  enroll  patients  and 
carry  out  the  study  once  patients  were  enrolled.  However,  the  challenges  at  start  up  were  big. 

What  was  Difficult: 

The  IRB  process  took  a  long  time  and  getting  all  the  paperwork  completed  was  much  longer 
than  anyone  anticipated.  The  modem  technology  used  to  transfer  the  reading  from  the  meter  to 
the  database  came  from  Israel  and  when  it  arrived  the  firmware  had  to  be  upgraded.  Thankfully 
their  technical  support  person  was  able  to  upgrade  all  the  devices  before  they  were  given  to  the 
patients.  The  equipment  problems  did  not  end  there.  The  cables  connecting  the  glucose  meter 
to  the  modem  was  also  problematic.  The  manufacturer  recalled  the  cables  and  that  delayed  the 
study  a  few  months.  Unfortunately,  many  cables  had  been  given  out  already  and  therefore  led 
to  frustration  on  the  part  of  the  participants  as  well  as  the  clinical  staff.  A  lot  of  time  was  spent 
by  Donna  and  her  technical  support  person,  as  well  as  ISIS  technical  support  debugging  the 
cable  problem.  A  site  visit  was  made  by  ISIS  personnel  to  help  debug  and  fix  the  problems  be¬ 
cause  not  all  the  problems  could  be  recreated  at  the  ISIS  Center. 

Computers  were  purchased  with  the  intention  that  they  would  be  placed  in  public  areas  to  be 
used  by  participants  who  did  not  have  easy  access  to  a  computer.  However,  placement  of 
those  computers  became  difficult.  Finding  safe  and  secure  locations  that  would  allow  the  com¬ 
puter  and  also  had  appropriate  Internet  connectivity  was  difficult.  It  ended  up  that  one  computer 
was  placed  in  the  senior  center  and  the  other  four  remained  in  the  clinic. 
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Adjustments  to  the  Site: 

There  were  no  major  modifications  made  to  the  web  site  for  PBCI. 

Incentives: 

Incentives  per  se  were  not  used  to  encourage  participation.  With  increased  staffing,  Donna  felt 
she  might  have  had  better  success  encouraging  participation  by  those  enrolled  or  even  enrolling 
more  patients.  Also  some  patients  required  a  lot  of  prompting  to  get  them  to  send  their  readings 
into  the  site  and  review  the  data  online.  However,  some  of  their  patients  really  did  embrace  the 
system  and  enjoy  using  it  and  feel  that  they  have  gotten  a  lot  out  of  it.  Potential  reasons  why  it 
has  been  difficult  to  get  people  to  participate  include: 

Cultural  considerations 
Depression 

-  Overwhelmed  patients 

-  Educational  limitations 
Distrust  of  technology 

-  Wrong  generation  perhaps  -  most  of  the  patients  are  of  an  older  generation 
In  Summary: 

The  ISIS  Center  personnel  took  over  administering  the  surveys  to  avoid  any  conflict  on  the  part 
of  the  surveyor. 

Donna’s  thoughts  on  the  project  as  a  co-investigator; 

MyCareTeam  is  a  good  resource 

-  Patients  who  have  used  the  program  to  the  fullest  have  expressed  that  they  really 
enjoyed  it 

Patients  and  the  health  clinic  are  already  doing  a  good  job  of  self  management  of 
blood  glucose  and  are  managing  well 

-  They  will  continue  to  follow  the  patients  enrolled  in  the  study 

Questions  and  comments  posed  to  Donna: 

1  Robert  Read  asked  how  many  tribal  members  have  diabetes. 

a.  Three  with  type  1  diabetes  and  220  with  type  2. 

b.  Donna  thought  if  they  had  lowered  the  HbAIC  requirements  to  less  than  7 
then  more  people  would  have  qualified  for  the  study 

c.  Michael  Ackerman  pointed  out  that  if  the  A1 C  level  were  reduced  to  below  7 
then  those  individuals  are  considered  in  control  already  and  the  system  may 
not  have  been  seen  as  helpful 

2.  Robert  read  asked  where  the  computers  were  that  had  not  been  installed  for  the  pa¬ 
tients.  Donna  explained  that  some  were  still  in  their  boxes. 

3.  Someone  raised  the  question  “How  do  you  see  the  women  who  have  gestational 
diabetes  that  is  hard  to  control  wanting  or  desiring  the  use  of  tech?" 

a.  Donna  answered  that  they  are  not  following  patients  with  gestational  diabetes 
at  PBCI. 

b.  Cherrel  responded  that  moms  like  that  they  can  communicate  with  the  dieti¬ 
cian  about  what  they  can  eat;  as  an  educator  she  likes  to  talk  to  the  moms; 
encouragement  helps  with  their  confidence;  the  women  with  gestational  dia¬ 
betes  often  want  to  know  if  they’ve  done  something  wrong  that  led  to  their 
getting  gestational  diabetes,  and  many  are  relieved  to  learn  more  about  it 
through  the  site. 

c.  Donna  asked  if  Cherrel  thought  that  pregnancy  was  an  incentive.  Cherrel  said 
yes,  pregnant  women  with  diabetes  want  to  do  everything  to  have  a  healthy 


W8 1 X  WH-04-2-0002 


baby  (al!  women  do);  keeping  their  blood  sugars  in  control  mean  they  will 
have  a  better  delivery  outcome 

4.  Betty  Keltner  expressed  the  belief  that  inspiration  leads  to  better  outcomes  is  not  al¬ 
ways  the  case;  note  on  the  sense  of  generalizability  of  the  project  -  the  ultimate  pur¬ 
pose  is  to  improve  patient  outcomes  and  the  deleterious  events.  She  then  asked 
how  we  see  it  working  for  improving  birth  outcomes.  If  on  a  priority  scale  of  the  5 
things  you  could  do  for  your  community  and  having  to  show  a  result,  how  is  this  tool 
going  to  be  able  to  achieve  this  act? 

a.  Betty  Levine  explained  about  the  study  completed  at  the  Boston  VA  on  adults 
with  type  2  diabetes  resulted  in  a  2%  drop  over  a  year  in  HbAIC  for  those 
who  sent  in  data  regularly 

5.  Bette  Keltner  then  mentioned  that  the  question  is  about  bridging  the  gap  for  people 
who  live  in  really  isolated  circumstances,  are  we  approaching  this  by  using  what  we 
know?  A  smiling  face  is  an  expectation,  where  are  we  on  this  continuum  of  using  this 
tool  that  we  think  is  useful? 

a.  Dr.  Mun  responded  that  yes  the  Boston  study  has  shown  a  very  good  out¬ 
come,  but  certainly  technology  provided  a  role  in  that  study  and  other  condi¬ 
tions  came  together  to  make  it  successful,  so  we  need  to  find  what  are  those 
other  conditions  which  we  are  seeking  to  discover  in  this  study. 

6.  Cherrel  Christian  commented  that  when  it  comes  to  diabetes  management  its  time 
and  attention  (both  of  provider  and  patient)  that  leads  to  improved  outcomes;  even 
with  patients  labeled  as  non-compliant,  no  patient  sets  out  to  do  something  harmful; 
the  patient  is  going  to  meet  his  goai,  whether  or  not  that  is  the  same  as  the  educa-  ’ 
tor’s  goal;  technology  lets  the  provider  communicate  more  often  with  the  patient;  a 
patient  with  diabetes  sees  their  provider  normally  every  3  months  in  the  real  world; 
being  able  to  see  those  blood  sugars  would  help  providers  (like  if  the  patient’s  blood 
sugars  aren’t  looking  good);  telephone  tag  is  a  barrier;  you  can  use  this  to  increase 
time  and  attention;  any  encouragement  offered  by  the  system  can  help;  because  of 
the  nature  of  diabetes  the  time  and  attention  piece  is  what  this  is  going  to  help. 

Nez  Perce,  NiMiiPuu  Health  (NMPH)  -  Jaci  McCormack 

Recruitment  efforts: 

Jaci  McCormack,  the  study  coordinator  for  the  project  at  NiMiiPuu  Health,  presented  their  status 
update.  NMPH  serves  the  health  care  needs  of  the  tribal  members  of  Nez  Perce  and  their  de¬ 
scendants  and  families.  There  are  approximately  3,750  patients  served  at  NMPH.  NMPH  has  2 
clinics  located  62  miles  apart  on  the  Nez  Perce  Reservation  in  North  Central  Idaho. 

Patients  were  identified  as  eligible  for  the  project  by  reviewing  patient  charts  in  the  NMPH  elec¬ 
tronic  diabetes  registry.  Potential  participants  were  then  contacted  by  telephone  to  see  if  they 
were  interested  in  participating.  A  display  board  describing  the  project  was  erected  in  the  clinic 
lobby.  Fifty  patients  qualified  for  the  study  and  twenty-nine  enrolled.  Two  patients  have  with¬ 
drawn. 

Project  Team: 

Their  project  team  consists  of  Jaci,  the  project  coordinator,  1  nurse  practitioner,  2  physician  as¬ 
sistants,  2  nurses,  a  registered  dietitian,  and  a  diabetes  educator.  There  has  been  high  staff 
turnover  since  the  start  of  the  project  including  new  providers  hired,  staff  members  taking  ex¬ 
tended  leave,  people  being  transferred  and  others  resigning. 

What  was  Easy; 
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Interacting  with  the  study  participants  has  been  easy  for  Jaci,  especially  when  they  are  excited 
about  the  study.  She  also  found  it  easy  to  setup  the  incentive  program.  They  are  a  sports’ 
crazed  community,  so  while  it  was  a  bit  difficult  to  decide  what  incentives  to  use.  She  decided 
on  an  affiliation  with  Nike  Corporation  which  will  be  discussed  later. 

Jaci  found  being  excited  about  the  study  easy  since  she  felt  that  the  decision  the  clinic  was  tak¬ 
ing  to  adopt  the  technology  was  the  right  decision.  While  clearing  the  glucose  meters  of  existing 
or  bad  data  was  hard  as  was  the  initial  programming  of  the  modems,  she  was  confident  of  her 
ability  to  use  the  technology  and  support  the  participants  and  providers  with  downloading  their 
data  and  navigating  the  web  site. 

Because  of  the  positive  feedback  she  received  from  the  participants  and  the  providers,  Jaci 
found  it  easy  to  encourage  others  to  use  the  site  and  to  download  their  readings. 

What  was  Difficult: 


Dealing  with  the  IRB  and  the  time  that  was  required  was  very  frustrating. 

Recruitment  was  not  always  easy  since  there  is  a  distance  of  62  miles  between  the  two  ciinics 
from  which  she  was  recruiting.  It  was  also  difficult  to  connect  with  working  people  because  of 
the  different  hours  they  work  -  especially  those  working  for  the  casino. 

It  was  also  difficult  to  arrange  times  to  train  the  providers  because  of  their  busy  schedules.  To 
facilitate  the  provider  training,  Jaci  would  schedule  a  patient  appointment  with  the  provider  and 
use  that  time  to  train  them  on  the  site.  Once  the  providers  were  trained,  keeping  them  on  track 
to  review  the  patient  data  takes  much  of  Jaci’s  time. 

Adjustments  to  the  Site: 

Initial  inquiry  was  made  to  whether  it  was  possible  to  use  a  sliding  scale  for  insulin  prescribing. 

New  exercise  options  were  added  to  the  exercise  log  book  to  simplify  patients  tracking  their 
level  of  exercise. 

The  ability  for  them  to  submit  a  diabetes  activity  calendar  that  would  be  posted  on  the  lobby  bul¬ 
letin  board  is  in  place 

Technical  and  Equipment  Problems: 

Problems  were  encountered  getting  new  computers  installed,  and  connected  to  the  NMPH  net¬ 
work  after  ordering  them  for  use  by  project  personnel.  A  separate  Internet  line  was  installed  in 
the  clinic  for  the  patient  computer.  The  other  problem  was  finding  out  the  hard  way  that  there  is 
a  difference  between  analogue  and  digital  telephone  lines. 

Incentives: 

Patients  who  attended  an  information  session  on  the  project  were  given  fight  diabetes  car  mag¬ 
nets. 

Once  they  agree  to  participate  in  the  project  and  are  enrolled,  they  are  eligible  for  a  step- 
program  for  receiving  incentives. 

The  first  time  a  participant  downloads  their  readings  after  enrolling,  they  receive  a  pedometer. 
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If  a  participant  downloaded  two  times  in  the  months  of  May  and  June  and  checked  the  website 
once  per  month  they  received  a  Nike  T-Shirt  with  the  Diabetes  Program  symbol.  If  a  participant 
checked  their  blood  sugars  at  least  6  times  per  week  for  at  least  4  weeks  {the  4  weeks  did  not 
have  to  be  consecutive)  then  they  receive  Nike  running/walking  shoes  from  Nike. Net.  This  was 
arranged  through  Sam  McCracken. 

Lastly,  after  completing  the  study,  patients  will  receive  a  check  for  fifty  dollars. 

In  Summary: 

They  were  slow  getting  started  due  to  the  IRB  issues  and  the  slowness  in  setting  up  the  com¬ 
puters. 

At  approximately  4  months  into  the  study,  participant  and  provider  feedback  is  positive. 

Patient  and  provider  involvement  continues  to  grow. 

Statement  from  Roberta  Carr,  a  provider  using  the  system:  “...it’s  a  great  way  to  communicate 
with  patients  without  requiring  them  to  come  to  the  clinic  every  time.” 

Statement  from  George  Goldner,  a  participant  in  the  study:  “I’m  testing  my  blood  sugars  a  lot 
more  often  now  that  I'm  in  that  program.” 

Comments  from  some  of  the  surveys  that  were  completed: 

“It's  a  faster  way  to  contact  my  providers  —  I  usually  have  an  answer  by  the  end  of 
the  day.”  May  2006 

“It  has  motivated  me  to  check  my  blood  sugars.  I  like  seeing  the  logbook  with  green 
numbers.”  May  2006 

“My  family  is  drinking  more  water  now  instead  of  juice  after  getting  information  from 
the  website,  ’  I  learned  how  I  can  go  to  Disneyland  and  still  take  care  of  my  diabe¬ 
tes.”  June  2006 

Questions  and  comments  to  Jaci: 

1 .  Cherrel  mentioned  that  she  like  the  way  Jaci  stepped  the  incentives 

a.  Jaci  answered  that  after  people  received  information  about  the  step  program 
she  received  more  phone  calls  regarding  whether  or  not  they  were  following 
the  step  program  and  wanted  to  make  sure  they  were 

2.  We  will  took  into  whether  others  can  have  access  to  the  NIKE  link 

3.  Betty  mentioned  that  the  web  site  mapmyrun.com  (from  Google)  might  be  a  good  link  to 
add  to  the  site  —  especially  for  the  Nez  Perce  participants  since  they  are  so  into  exercise. 

4.  Cherrel  mentioned  that  the  American  Diabetes  Association  website  has  a  pedometer  log 

5.  Nicole  suggested  looking  at  Leslie  Sansone’s  website  promoting  walking. 

6.  Pam  explained  how  NMPH  has  established  3  clinical  teams  each  paired  with  one  nurse: 
physician's  assistant,  physician,  and  nurse  practitioner 

7.  Nicole  asked  what  the  initial  goal  for  recruitment  was 

a.  Initially  it  was  50  but  it  was  lowered  to  40. 

Mandan,  Hidatsa  and  Arikara  Nation  (MHA  Nation)  -  Pam  Angelus 

Recruitment  efforts: 
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There  are  approximately  600  patients  with  diabetes  seen  at  the  health  clinics  on  the  reservation 
of  the  MHA  Nation.  The  Parshall  and  the  White  Shields  clinics  were  selected  to  participate  in 
this  study.  Enrollment  began  in  September  2005  and  ten  patients  were  enrolled  between  Sep¬ 
tember  and  November  2005.  The  project  status  was  changed  to  inactive  in  December  2005. 

Of  the  ten  patients  enrolled,  five  had  A1C  numbers  that  were  below  the  protocol  inclusion  level 
and  needed  to  be  removed  from  the  project;  two  withdrew  on  their  own  and  the  remaining  three 
were  not  compliant  with  sending  in  their  data. 

Project  Team: 

Deborah  Hall-Thompson,  the  tribal  health  administrator  is  the  PI  for  the  project,  Bruce  Hall  was 
the  project  coordinator,  Shasta  Mandan  the  nurse  and  Richard  Mayer  the  CEO  of  MHA  Nation. 
One  nurse  declined  to  participate  and  another  became  a  participant  in  the  study.  All  the  physi¬ 
cians  declined  to  participate. 

What  was  Easy: 

Finding  and  hiring  the  local  project  coordinator  was  done  easily. 

The  technology  -  modems  and  cables  had  no  problems  while  working  with  the  initial  ten  pa¬ 
tients. 

What  was  Difficult: 

Many  of  the  difficulties  were  personnel  related.  The  project  coordinator  had  limited  research 
and  clinical  experience.  He  also  had  limited  access  to  patient  records  so  was  not  able  to  easily 
identify  patients  to  be  recruited  into  the  study.  In  general,  the  roles  and  responsibilities  of  the 
team  members  were  not  clear. 

There  were  also  many  problems  with  missing  documentation  to  support  invoices  submitted  by 
the  tribe.  It  took  many  months  to  get  invoices  paid  due  to  missing  documentation. 

Lastly,  the  severe  winters  limited  the  amount  people  could  get  around. 

Adjustments  to  the  Site: 

MHA  Nation  was  involved  in  the  initial  design  of  the  Native  American  version  of  the  My- 
CareTeam  site  including  the  selection  of  graphics  and  colors  to  be  used. 

Technical  and  Equipment  Problems: 

In  December  2005,  IHS  switched  the  glucose  meters  that  were  being  used  by  the  members  of 
the  MHA  Nation  which  resulted  in  a  change  in  the  modem  being  used  to  transfer  the  glucose 
readings  to  the  database.  This  prompted  us  to  put  the  project  on  hold  until  all  issues  could  be 
resolved. 

Incentives: 

T-shirts  and  coffee  mugs  were  used  as  incentives  to  participants  in  the  project. 

In  Summary: 

When  the  project  status  was  changed  to  inactive,  the  study  coordinator  was  laid  off  and  no  more 
funds  were  spent  on  the  project.  ISIS  continues  to  try  and  engage  the  tribe  to  restart  the  study. 

Questions  and  comments  posed  to  Pam: 

1 .  Marjorie  Mau  asked  if  there  were  other  competing  diabetes  programs  in  this  area. 
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a.  Pam  responded  that  there  was  a  clinic  run  by  the  Indian  Health  Service  not  a 
tribal  clinic  that  has  a  diabetes  program.  However,  it  is  very  confusing  determin¬ 
ing  who  IHS  employees  are  and  who  tribal  employees  are.  There  is  not  always 
cooperation  between  tribal  and  IHS  employees. 

2.  It  was  then  asked  if  the  tribal  clinics  were  busy. 

a.  Yes,  the  White  Shield  clinic  was  pretty  busy,  that  was  why  one  of  the  nurses  did 
not  participate  because  she  was  too  busy 

3.  Cherrel  asked  if  the  progress  was  made  more  difficult  because  there  was  no  one  person 
that  said  I’m  going  to  push  forward  this,  like  a  doctor. 

a.  Yes,  it  wouldn’t  need  to  be  a  physician  but  I  think  it  was  part  of  the  problem  since 
there  was  no  one  willing  to  push  the  study  forward.  Rich  Mayer  (CEO  of  MHA 
Nation)  would  get  involved  periodically  but  it  was  hard  to  keep  him  involved. 

b.  Pam  suggested  that  it  may  just  take  going  out  to  the  reservation  and  being  a 
presence  to  keep  them  engaged. 

c.  Betty  Levine  suggested  that  since  we  started  working  with  them  even  before  the 
Congressional  funds  came  through;  they  may  have  lost  interest  and  momentum 
because  of  how  long  it  took  to  get  started. 

Tlingit  &  Haida  Tribes,  South  East  Area  Regional  health  Consortium  (SEARCH)  -  Pam 
Angelus 

Recruitment  efforts: 

The  SEARHC  Clinic  provides  medical  services  to  Tlingit  and  Haida  tribal  members  on  behalf  of 
the  Tlingit  and  Haida  tribes.  There  are  approximately  3,500  Alaskan  Natives  and  American  In¬ 
dians  living  in  Juneau  Alaska.  Six-percent  of  AN/AI  have  diabetes  compared  to  4.5%  of  the 
general  population.  SEARHC  provides  outpatient  services  for  about  194  individuals  with  diabe¬ 
tes. 

To  recruit  for  the  project,  SEAHRC  personnel  compiled  a  list  of  potential  participants  from  the 
clinic  registry.  They  held  a  lunch  where  they  demonstrated  the  web  site  and  the  modem  to  en¬ 
courage  participation.  They  also  demonstrated  the  web  site  to  the  providers  showcasing  one  of 
their  patients  to  encourage  them  to  refer  patients.  The  providers  “Were  amazed  at  the  web  site". 

Enrollment  started  March  2006  and  at  the  time  of  the  meeting  they  had  9  participants  enrolled 
but  only  six  were  actively  engaged. 

Project  Team: 

The  research  team  consists  of  2  physicians  —  Dr,  Sheufelt  who  is  the  PI  and  Mary  Owens,  two 
study  nurses  and  a  physical  therapist.  One  of  the  nurses,  Colleen  McNulty  is  also  the  project 
coordinator.  Colleen  McNulty  consults  with  multiple  providers  to  manage  the  study  patients. 

She  works  with  multiple  physicians  to  coordinate  medication  changes  and  ordering  of  labs. 

What  was  Easy; 

The  connection  of  the  glucose  meters  to  the  modems  worked  very  well  and  was  easy  for  pa¬ 
tients  to  work  with. 

Two  computers  were  acquired  to  setup  as  patient  kiosks  in  two  locations.  The  acquisition  of 
those  computers  went  smoothly  -  however  they  were  never  setup. 

What  was  Difficult: 

Fewer  patients  qualified  for  the  project  than  originally  thought.  It  was  difficult  to  identify  patients 
with  an  A1C  greater  than  7. 
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Also,  there  were  many  celebrations  which  made  it  difficult  for  them  to  hold  lunches  and  invite 
potential  participants. 

Adjustments  to  the  Site: 

Some  medications  were  added  to  the  web  site. 

Technical  and  Equipment  Problems: 

There  were  many  problems  with  patients  not  having  the  correct  date  and  time  set  on  their  glu¬ 
cose  meter.  This  would  result  in  data  being  sent  to  the  database  with  incorrect  dates  and  times. 
When  the  data  was  processed  it  was  presented  incorrectly  because  the  timestamp  for  the  read¬ 
ing  was  wrong.  The  patients  were  educated  to  check  the  date  and  time  setup  in  their  meter  be¬ 
fore  taking  a  reading. 

There  was  one  patient  that  had  some  trouble  due  to  the  Internet  Explorer  Security  settings  on 
her  PC.  Technical  support  was  able  to  work  with  her  to  solve  the  problem. 

Incentives: 

None. 

In  Summary: 

None  given. 

Questions  and  comments  posed  to  Pam: 

None. 

Papa  Ola  Lokahi  -  Pam  Angelus 

Recruitment  efforts: 

Native  Hawaiians  make  up  20%  of  the  total  population  of  Hawaii,  approximately  225,000  peo¬ 
ple.  Two  health  clinics  -  Na  Pu’uwai  and  Ke  Ola  Mamo  -  serve  the  Native  Hawaiians  participat¬ 
ing  in  the  study.  Na  Pu'uwai  is  on  the  island  of  Molokai  and  Ke  Ola  Mamo  is  located  in  Hono¬ 
lulu.  Papa  Ola  Lokahi  is  the  Native  Hawaiian  health  administration  that  is  overseeing  the  project 
at  both  clinics  in  Hawaii.  Combined  the  clinics  serve  250  people  with  diabetes. 

Each  clinic  compiled  a  list  of  potential  participants  from  their  clinic  registry  and  then  recruited  in 
the  clinic  and  by  phone.  Enrollment  is  to  begin  in  July  2006.  Na  Pu'uwai  has  already  identified 
9  patients  to  enroll  and  Ke  Ola  Mamo  has  identified  7. 

Project  Team: 

Donna-Marie  Palakiko,  RN,  MSN  is  the  Principal  Investigator/Study  Coordinator  at  Ke  Ola 
Mamo,  and  Donna  Carvalho,  RN,  CDE  is  the  Co-Investigator/Study  Coordinator  at  Na  Pu’uwai. 
There  is  one  physician  identified  at  each  site  and  the  project  director  is  at  Papa  Ola  Lokahi. 
Community  Health  Workers  will  help  at  both  clinics  recruit,  educate,  and  monitor  participants. 

At  Ke  Ola  Mamo,  the  nurse  and  community  workers  will  consult  with  multiple  providers  to  man¬ 
age  the  study  participants.  At  Na  Pu'uwai  the  nurse  and  community  workers  will  consult  with 
one  provider  to  manage  the  study  participants. 

What  was  Easy: 

For  us  the  easy  parts  have  been  traveling  to  Hawaii,  receiving  chocolate  and  the  "hugs”,  and 
making  the  requested  changes  to  the  MyCareTeam  web  site. 
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What  was  Difficult: 

The  most  difficult  part  so  far  has  been  working  with  the  local  Hawaiian  IRB.  The  process  took 
much  longer  than  expected. 

Adjustments  to  the  Site: 

Changes  were  made  to  the  website  to  incorporate  the  Hawaiian  language,  add  images  of  Kukui 
trees  around  the  clinic  building  (the  Kukui  Tree  is  the  state  tree  and  has  some  medicinal  pur¬ 
poses),  Lauhala  mat  on  floor  of  virtual  clinic  (which  is  used  in  traditional  homes  and  for  ceremo¬ 
nial  purposes),  and  links  to  articles  on  diabetes  by  Hawaiian  authors  and  researchers 

Technical  and  Equipment  Problems: 

The  only  technical  issue  so  far  was  that  Hawaii  does  not  use  daylight  savings  time  so  the  ven¬ 
dor  of  the  modem  needed  to  modify  their  software  to  take  that  into  account.  Otherwise,  the  mo¬ 
dem  would  reset  the  date/time  stamp  in  the  glucose  meter  each  time  the  patient  uploaded  their 
glucose  readings. 

Incentives: 

Gift  certificates  will  be  given  to  participants. 

Questions  and  comments  posed  to  Pam: 

1.  Robert  Read  asked  about  the  enrollment  numbers. 

a.  Total  enrollment  wili  be  30  participants  - 15  at  each  clinic. 

2.  Nicole  asked  if  each  site  could  have  articles  by  local  researchers. 

a.  Yes,  as  long  as  they  provide  links  to  the  articles  or  information  to  point  to. 

3.  It  was  suggested  that  Diabetes  Forecast  has  personal  stories  that  could  be  added  for  the 
cultures  that  are  focused  on  story  tellers 

4.  Donna  Johnson  asked  how  it  was  decided  to  use  community  health  nurses. 

a.  Pam  explained  that  it  was  the  sites  decision. 

5.  Donna  Johnson  also  asked  if  any  additional  staff  was  hired. 

a.  Pam  replied  not  yet  but  they  had  not  started  enrolling  yet. 

Evaluation  of  Project 

Inyoung  Choi  described  how  she  was  preparing  to  carry  out  the  evaluation  of  the  Sacred  Breath 
Project.  She  described  that  the  evaluation  model  consists  of  measuring  the  alignment  of  the 
clinical  deployment  of  MyCareTeam  in  the  different  sites.  She  will  relate  the  measures  to  the 
different  phases  of  the  evaluation  and  will  use  both  quantitative  and  qualitative  methods. 

Inyoung  will  evaluate  the  project  by  examining  4  perspectives  over  three  phases.  The  phases 
include  the  planning,  implementation  and  monitoring  phases.  Within  each  of  these  phases,  she 
will  determine  operational,  technical,  security,  and  outcome  measures. 

To  evaluate  the  planning  phase,  three  categories  of  operations  will  be  examined:  project  team, 
diabetes  management  process,  and  IRB  process.  The  project  team  will  be  defined  and  the 
roles  of  the  team  members  identified.  The  diabetes  management  process  at  each  site  will  be 
documented  detailing  how  often  patients  visit  the  clinic  and  receive  their  HbAI  C  test.  Lastly,  the 
IRB  process  will  be  thoroughly  documented  what  was  required  to  receive  IRB  approval,  how 
long  it  took  to  get  it  and  what  were  the  issues  that  arose  across  the  different  site. 

The  technical  issues  to  be  considered  during  the  planning  phase  include  hardware  and  software 
installations,  network  and  Internet  accessibility,  medical  device  connectivity,  modifications  to 
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existing  application  required  by  the  sites,  and  the  setup  and  implementation  of  the  technology 
into  the  existing  diabetes  programs. 


The  planning  phase  will  evaluate  the  security  of  the  current  infrastructure,  determine  security 
requirements  -  both  hardware  and  software,  identify  threats  and  security  roles,  and  ensure  the 
security  policy  is  enforced. 

The  implementation  phase  focuses  on  operational  and  technical  requirements.  Training,  work- 
flow  and  patient  recruitment  are  the  key  items  to  consider  when  evaluating  the  operational  as¬ 
pects  of  the  implementation  phase.  Educational  materials  for  the  training  program  and  execut¬ 
ing  the  training  will  be  performed  during  this  phase.  Current  workflow  for  the  diabetes  manage¬ 
ment  groups  will  be  determined  and  the  changes  to  the  software  that  were  identified  are  an¬ 
other  part  of  the  operational  requirements.  Lastly,  patient  recruitment  and  enrollment  will  be 
analyzed  to  determine  its  success  in  the  implementation  phase. 

The  technical  requirements  for  the  implementation  phase  include  the  setting  up  of  hardware  and 
software  at  each  site,  the  configuring  of  the  modem  devices,  and  preparing  the  Internet  connec¬ 
tivity  for  each  site. 

The  monitoring  phase  combines  operational  requirements,  technical  requirements,  security  is¬ 
sues,  and  outcome  evaluations.  During  this  phase,  the  operational  requirements  and  success 
will  be  measured  by  looking  at  adherence  issues  -  frequency  with  which  participants  check  their 
blood  sugar,  frequency  with  which  they  transfer  those  readings  to  the  site,  frequency  with  which 
they  review  the  readings,  frequency  that  providers  review  the  readings,  etc. 

The  technical  success  will  be  evaluated  by  looking  at  the  technical  support  issues  that  have 
arisen  during  the  monitoring  phase.  The  number  of  support  calls  received,  the  number  of  bugs 
fixed,  and  the  time  spent  to  resolve  these  issues  will  be  evaluated.  Monitoring  the  compliance  of 
the  security  policies  is  critical  during  the  monitoring  phase  to  determine  if  the  confidential  infor¬ 
mation  has  remained  secure. 

During  the  monitoring  phase  we  will  be  able  to  evaluate  the  project  looking  at  both  clinical  and 
other  outcomes.  The  clinical  outcomes  to  be  evaluated  include  change  in  HbAIC  values,  cho¬ 
lesterol  measures,  number  of  hypo-  and  hyper-  glycemic  events,  etc.  Some  of  the  other  out¬ 
come  measures  include  patient  satisfaction,  frequency  of  use,  and  ease  of  use. 

Lessons  Learned 

Two  things  that  increase  the  probability  of  success  at  each  clinic  appear  to  be  a  strong  local 
clinical  coordinator  and  a  well  defined  existing  diabetes  management  program.  The  role  of  the 
local  project  coordinator  at  each  clinic  is  critical  to  the  success  of  the  project  since  they  deal  di¬ 
rectly  with  the  patients  and  the  providers  and  are  the  ones  that  actually  encourage  the  use  of 
the  system,  if  a  site  has  a  well  defined  process  for  managing  their  patients  with  diabetes,  incor¬ 
porating  the  technology  into  that  program  is  simpler  than  trying  to  implement  the  technology  into 
a  clinic  without  a  well  defined  diabetes  management  program. 

The  sites  that  have  a  local  technical  support  person  actually  do  better  with  implementing  the 
technology  than  those  sites  without  local  support.  The  sites  with  the  support  can  trouble  shoot 
issues  more  quickly  and  provide  more  detailed  descriptions  of  problems  to  the  ISIS  Center. 
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During  the  monitoring  phase,  it  is  critical  to  continuously  encourage  patients  and  providers  to 
use  the  system  and  communicate  via  the  application  as  opposed  to  waiting  for  patients  to  visit 
the  clinic  or  making  a  phone  call. 

Questions  and  Comments  for  Invouna 

1.  Cherrel  Christian  asked  if  a  survey  was  planned  for  providers. 

a.  It  was  discussed  but  at  any  given  site  there  are  only  1  to  3  providers  so  we  didn’t 
end  up  doing  a  survey.  We  have  discussed  talking  with  them  one  and  one  to  get 
their  feedback.  Much  of  their  feedback  is  given  through  weekly  or  bi-weekly  con¬ 
ference  calls  already, 

2.  Bette  Keltner  provided  some  insight  into  our  evaluation  plan  as  follows:  Feedback  would 
be  possible,  but  because  the  number  of  providers  is  so  small  the  feedback  won't  be 
anonymous  so  the  information  received  may  not  be  very  useful.  Evaluation  is  focused 
on  what  works  for  what  people  under  what  conditions?  Well  informed  site  coordinators 
can  drill  down  and  make  sure  we  receive  feedback  from  the  providers.  The  site  coordi¬ 
nators  can  also  help  to  determine  if  this  program  is  a  vehicle  that  is  attractive  to  older 
people?  To  Women?  This  type  of  information  could  be  useful  for  further  defining  the  out¬ 
reach  of  Sacred  Breath.  It  is  especially  important  to  understand  the  conditions  where  our 
sites  are  located,  and  the  kinds  of  human  interaction  that  may  not  be  face  to  face  but 
where  the  person  serves  as  an  intermediary  that  engages  groups  of  people.  In  the 
evaluation  plan,  I  like  how  you  outline  it  because  it’s  so  clear,  the  change  of  events.  It  al¬ 
lows  a  comprehensive  and  continuous  result. 

3.  A  discussion  followed  about  whether  we  had  enough  data  to  state  anything  statistically? 

a.  We  may  be  able  aggregate  the  number  of  patients  in  all  our  native  communities 
to  get  a  large  enough  sample  size.  However,  we  don’t  have  a  control  group  but 
we  have  their  initial  A1C  level  from  before  they  came  into  the  program.  We  can 
look  at  the  frequency  with  which  people  use  this  program.  Thus  we  can  answer 
the  question,  “Do  people  use  it”?  “Is  it  acceptable"? 

b.  Mike  Ackerman  said  yes  we  could  look  at  those  questions,  but  that’s  not  going  to 
get  us  more  funding. 

c.  Robert  Read  said  but  that  will  help  looking  at  the  satisfaction  data. 

d.  We  can  mine  down  into  the  messages  sent  between  patients  and  their  providers 
to  gain  insight  into  their  satisfaction.  It’s  another  piece  of  information  we  can  get 
out  of  the  data.  We  can  see  how  the  patients  and  providers  use  the  online  tech¬ 
nology,  the  types  of  questions  they  ask.  Hopefully,  the  data  will  tell  us  definitely 
whether  there  have  been  improvements  in  clinical  outcomes.  One  thing  in  our  fa¬ 
vor  is  the  two  studies  that  were  previously  completed  showing  positive  clinical 
outcomes  by  those  individuals  that  used  the  technology.  These  studies  were 
both  published  and  showed  marked  improvement  in  HbAIC  for  patients  using  the 
technology  compared  to  those  that  didn’t  use  it. 

4.  Nicole  Johnson  asked  if  some  question  on  the  survey  or  a  component  of  it  dealt  with 
psycho-social  issues.  Do  the  patients  using  the  system  have  more  confidence?  Are  they 
less  depressed?  She  described  that  people  may  see  a  number  and  if  it’s  a  bad  number 
they  don’t  want  to  test  again  since  they  don’t  want  to  see  another  bad  number.  She 
wanted  to  know  if  there  were  some  ways  to  see  if  there  was  a  shift  in  that  psychology. 

a.  Cherrel  followed  up  with,  “Are  people  having  a  more  developed  conversation  with 
their  provider  at  that  3  month  visit,  b/c  they  have  more  info?” 

b.  We  did  not  ask  psycho-social  questions  like  that  on  the  survey  so  we  have  no 
real  way  of  knowing  the  answer. 

c.  Nicole  followed  up  with  we  might  be  able  to  make  more  of  a  long-term  impact  on 
peoples  state  of  mind  or  mood. 
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d.  Cherrel  said  that  at  NNMC  when  a  physician  adjusts  a  mother’s  insulin,  they  say 
that  you  need  more  insulin  because  this  is  what  is  expected  during  pregnancy 
which  keeps  the  mother  from  thinking  she  did  something  wrong 

e.  Jim  Mingle  responded  that  it’s  not  what  you  say  but  how  you  say  it. 

f.  Seong  K.  Mun  stated  that  we  are  not  experts  in  this  field  and  this  is  where  we 
rely  on  consultants  who  are  experts. 

g.  Marjorie  Mau  summarized  that  what  we  are  trying  to  measure  the  use  of  technol¬ 
ogy  in  a  set  program  and  to  evaluate  its  effect  in  a  different  environments  we 
could  use  process  measures.  She  described  that  we  could  also  use  value  meas¬ 
ures  which  have  built  in  validity  but  she  didn’t  get  the  sense  that  that’s  what  we 
want  to  measure.  She  described  it  as  us  measuring  the  impact  of  the  technology 
and  she  pointed  out  that  the  project  coordinators  have  intimate  knowledge  of  im¬ 
plementing  these  technologies  in  difficult  environments. 

h.  Seong  K.  Mun  described  how  we  had  to  start  from  scratch  and  build  infrastruc¬ 
ture  especially  as  it  relates  to  recruiting  patients.  Many  of  the  sites  did  not  have 
a  process  in  place  for  doing  that.  He  described  how  difficult  it  was  to  implement 
this  type  of  program  in  a  location  without  the  infrastructure  for  diabetes  manage¬ 
ment  -  with  or  without  the  technology. 

i.  Betty  Levine  described  that  other  projects  have  been  unsuccessful  because  they 
have  not  been  able  to  recruit  participants. 

j.  Again  Marjorie  Mau  stated  that  recruiting  was  easier  when  they  had  an  existing 
clinic  like  at  NNMC.  This  provided  existing  means  to  tap  into  an  existing  clinic 
population  and  it  becomes  fairly  clear  as  to  how  that’s  done.  In  the  Pacific,  the 
question  patients  ask  is  “What  is  the  added  value  to  my  care?”  For  the  providers 
it  is  “What  is  the  added  value  to  my  patient?”  For  some  it  was  that  they  didn’t 
have  to  come  into  DC  and  battle  the  traffic.  She  is  not  sure  what  the  incentives 
are  for  other  groups.  There  is  added  value  above  and  beyond  their  original  care  if 
they  embraced  the  technology. 

k.  Cherrel  felt  the  added  value  was  the  patient  feeling  like  the  provider  spent  addi¬ 
tional  time  on  their  care  -  gave  them  that  pat  on  the  back. 

l.  Robert  Read  asked  why  the  program  was  different  than  an  office  visit  where  the 
patient  could  get  the  same  attention. 

m.  Bette  Keltner  questioned  whether  we  could  test  end  measures  to  get  a  sense  of 
proportionality. 

n.  Pam  Angelus  mentioned  that  another  added  value  is  giving  time  back  to  the  pro¬ 
vider.  Especially  while  treating  pregnant  women  with  diabetes,  providers  /nurses 
spend  time  calling  patients  to  record  their  blood  sugar  readings. 

o.  Bette  Keltner  replied  that  that  needed  to  be  tested. 

p.  Pam  Angelus  stated  that  since  we  have  not  gotten  the  provider  support  that  we 
had  hoped  for,  it  will  be  difficult  to  test  that.  However,  one  of  our  goals  was  to 
give  time  back  to  the  providers  by  their  using  this  tool. 

q.  Jim  Mingle  mentioned  that  the  bigger  issue  on  the  provider  side  was  reimburse¬ 
ment.  Providers  and  especially  physicians  want  to  be  paid  for  their  time.  Doc¬ 
tors  see  this  as  another  thing  they  have  to  do  that  they  won’t  get  paid  for.  Kaiser 
is  starting  to  pay  physicians  $10  per  message  if  they  email  their  patients  but  it 
has  to  be  worked  out  through  state  and  federal  governments. 

r.  Marjorie  Mau  stated  that  in  Hawaii  90  of  Hawaiians  are  covered  by  insurance  but 
they  have  yet  to  see  the  benefits  of  the  foot  and  eye  exams  being  provided. 

s.  Bette  Keltner  noted  that  the  system  is  driven  for  the  benefit  of  providers  and 
there  has  to  be  that  incentive,  but  how  does  that  become  more  efficient  in  an  in¬ 
dustry  that  is  spiraling  out  of  control  in  terms  of  costs,  there  is  too  much  at  stake. 
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t  Betty  Levine  pointed  out  that  the  nurse’s  time  is  freed  up  but  that  does  not  help 
with  reimbursement  issues  since  the  nurses  are  salaried  employees.  A  good 
time  motion  study  is  needed. 

u.  It  was  pointed  out  that  billing  becomes  very  important  in  physician  offices  and  of¬ 
ten  nurses  are  reduced.  Therefore  their  workload  increases  and  until  technology 
is  embraced  it  is  difficult  to  see  how  this  will  be  changed. 

v.  The  concept  of  pay  for  performance  for  physicians  came  up  and  how  that  might 
“encourage”  a  physician  to  use  a  tool  like  this. 

Next  Meeting 

1.  Plan  the  next  meeting  in  about  6-12  months 

2.  Invite  the  sites  again  to  share  their  experiences 

3.  Provide  opportunities  for  discussions 

4.  Hold  the  meeting  at  one  of  the  Native  sites  -  possibly  Idaho 

Commercialization 

Betty  Levine  and  Jim  Mingle  described  the  commercialization  effort  of  MyCareTeam.  The  his¬ 
tory  behind  the  MyCareTeam  software  is: 

a.  It  came  to  life  in  1999 

b.  First  pilot  studied  completed  December  2000 

c.  Large  clinical  trial  October  2001  to  April  2004 

d.  Filed  patent  application  in  October  2001  -  patent  is  still  pending 

e.  Filed  for  copyright  January  2001  and  received  it  February  2002 

f.  In  the  process  of  registering  the  MyCareTeam  logo 

g.  Entered  discussions  w/  Jim  Mingle  in  November  2004  while  talking  with  other 
companies  as  well 

h.  Jim  came  through  with  a  business  plan 

i.  September  2005  GU  entered  licensing  agreement  with  MyCareTeam  Inc 

Jim  Mingle  then  discussed  the  different  offerings  that  the  company  has  for  the  MyCareTeam 
application: 

a.  Personal  version  -  allows  individuals  to  manage  their  own  disease  while  inviting 
friends  and  relatives  to  help  as  support  “buddies” 

b.  Professional  version  -  follows  the  original  intent  of  the  software  designed  at  GU 
where  the  health  care  provider  provides  the  support 

Georgetown  University  started  with  the  professional  version  and  the  company  still  thinks  there  is 
a  market  for  this.  It  aggregates  people  and  really  makes  sense  for  identifying  who  needs  atten¬ 
tion.  However,  the  company  decided  to  lead  with  the  personal  version.  The  personal  version 
allows  one  to  help  a  family  member,  friend  or  love  one  manage  their  diabetes,  A  mom  or  dad 
can  manage  their  kid’s  diabetes  when  they  first  go  off  to  college;  and  adult  child  can  help  an 
elderly  parent  living  in  Florida;  sometimes,  the  family  member  of  a  person  with  diabetes  feels 
more  guilt  about  not  being  able  to  help. 

The  company  modified  the  site  to  make  it  easy  for  an  individual  to  register  on  the  site  and  to  in¬ 
vite  others  to  join  their  support  team;  to  print  logs  and  reports;  to  read  data  from  multiple  meters 
seamlessly. 

MyCareTeam,  Inc  is  currently  establishing  partnerships  with  different  organizations  and  key 
players  in  distinct  industries.  They  can  modify  the  software  such  that  it  looks  like  another  com- 
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pany  or  organizations’  website  {the  software  is  really  MyCareTeam)  in  order  to  “skin”  the  site  if 
they  enter  into  a  relationship  with  a  company  or  organization. 

The  goal  of  MyCareTeam,  Inc  is  to  get  the  technology  into  the  hands  of  as  many  people  as  pos¬ 
sible.  Cost  should  not  be  a  limiting  factor  stopping  anyone  from  using  the  technology. 

The  users  can  easily  print  out  reports  that  they  can  bring  to  their  doctor  while  using  any  vendor’s 
glucose  meter. 

The  commercial  version  is  now  in  a  beta  test  and  they  have  shown  they  can  read  from  more 
than  19  different  glucose  meters. 

Questions  and  comments  for  Betty  and  Jim 

1 .  Betty  explained  that  each  of  the  Sacred  Breath  sites  were  curious  what  would  happen  at 
the  end  of  the  project  period  if  they  found  the  technology  useful.  We  explained  that  the 
commercialization  effort  allowed  us  to  offer  the  technology  to  them  at  minimal  cost  after 
the  end  of  the  study  period. 

2.  Nicole  asked  if  we  could  have  a  larger  group  of  participants  to  improve  our  enrollment 
numbers.  We  continue  to  submit  grants,  some  of  which  include  working  with  My¬ 
CareTeam,  Inc,  to  expand  the  technology,  the  disease  states  and  the  number  of  enrol- 
lees.  Seong  K.  Mun  expressed  that  getting  research  funding  to  explore  other  questions 
that  were  raised  today  is  difficult. 

3.  Jim  Mingle  asked  if  we  thought  about  what  would  happen  if  we  offered  incentives  to 
people  to  participate.  Dr.  Mun  responded  that  you  can  offer  incentives  indefinitely. 

4.  Reimbursement  was  raised  again  and  this  time  Seong  K.  Mun  said  he  felt  it  would  get 
handled  eventually. 

5.  Discussion  about  how  much  you  want  someone  supporting  or  watching  over  you  came 
up.  Nicole  expressed  that  sometimes  it  is  just  too  much  and  you  don’t  want  it.  She’s  not 
sure  the  right  answer. 
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Sacred  Breath 

2nd  Advisory  Board  Meeting  Agenda 


Location: 

ISIS  Center 
Georgetown  University 
Room  603 

2115  Wisconsin  Ave,  NW 
Washington,  DC  20057 
202-687-5990 


10:00 

Introductions  &  Welcoming  Remarks 

Seong  K.  Mun 

10:30 

Opening  Statement  &  Agenda  Review 

Marjorie  Mau 

10:45 

Sacred  Breath  Reports  and  Discussion 

•  Status  Report 

•  Site  Reports 

Betty  Levine 

o  National  Naval  Medical  Center 

Cherrel  Christian 

o  Poarch  Band  of  Creek  Indians 

Donna  Johnson 

o  Nez  Perce 

Jaci  McCormack 

o  Tlingit  and  Haida  Tribes  (SEARHC) 

Pam  Angelus 

o  Papa  Ola  Lokahi 

Pam  Angelus 

o  Mandan,  Hidatsa,  &  Ankara  Nation 

Pam  Angelus 

•  Discussion  of  Site  Reports 

Marjorie  Mau 

1:00 

Lunch  &  Continued  Discussion  of  Morning  Presentations 

2:00 

Evaluation  of  Project 

Inyoung  Choi 

2:20 

Commercialization  Effort 

Betty  Levine 

2:45 

Open  Discussion 

•  Sustainability 

•  Adding  Other  Chronic  Diseases 

•  Expanding  to  Other  Communities 

•  Improving  Patient  Enrollment  &  Involvement 

•  Improving  Provider  Participation 

Marjorie  Mau 

3:45 

Closing  Remarks 

Marjorie  Mau 

Seong  K.  Mun 
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